Definition

A symbolic link (symlink) is a Unix filesystem primitive that points one path to another. In security contexts, symlink following (CWE-61) can redirect file operations to sensitive targets outside an expected workspace.

Key Points

  • Used in ghostapproval attacks against AI coding assistants
  • Confirmation UIs may display the symlink path while writes target the resolved path
  • Mitigation: resolve symlinks before approval prompts and block out-of-workspace writes

Sources