THREATOPS
THREAT OPSThreat News › Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

lowsnykPublished 2026-07-09

A harmless-looking symlink in a Git repo can redirect a tool into reading or writing anywhere on your machine. That old trick is now showing up in AI coding assistants, with nasty results.

Original source: https://snyk.io/blog/symlinks-are-still-scary/