Definition
A symbolic link (symlink) is a Unix filesystem primitive that points one path to another. In security contexts, symlink following (CWE-61) can redirect file operations to sensitive targets outside an expected workspace.
Key Points
- Used in ghostapproval attacks against AI coding assistants
- Confirmation UIs may display the symlink path while writes target the resolved path
- Mitigation: resolve symlinks before approval prompts and block out-of-workspace writes