Wiz named attack GhostApproval. Agents recognize dangerous symlink targets internally but confirmation dialogs hide true path. Human-in-the-loop safety net rendered useless. Amazon fixed with CVE-2026-12958. Google critical fix in Antigravity May 22. Cursor v3.0 fix CVE-2026-50549. Anthropic closed ticket as informative; symlink warnings predate Wiz report.