Symlink following
Named by 3 kept items in this workspace.
2 items name it under techniques and 1 under classification.key entities.
Search every workspace for Symlink following. It matches the name as written, so it can find other things that share it.
The items that name it 3
Attacker places a symbolic link disguised as a benign workspace file (e.g. project_settings.json) pointing to a sensitive file outside the workspace (e.g. ~/.ssh/authorized_keys or ~/.zshrc); AI coding agent follows the link and writes to the resolved target without validating the canonical path
Manipulation of the assertPathAllowed function's path validation logic to follow symbolic links, potentially leading to unauthorized file access or modification; local attack vector, low complexity, no user interaction required
All techniques in this workspace.