# Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

DevFeed: [Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)](<https://devfeed.tech/articles/symlinks-are-still-scary-and-yes-you-can-commit-them-to-git-8199.md>)

Original publisher: [Read original article](<https://snyk.io/blog/symlinks-are-still-scary/>)

Author: Randall Degges

Published: 2026-07-09T00:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Git](<https://devfeed.tech/topics/git.md>), [ai-coding](<https://devfeed.tech/topics/ai-coding.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Unix](<https://devfeed.tech/topics/unix.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [ai-coding](<https://devfeed.tech/tags/ai-coding.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [article](<https://devfeed.tech/tags/article.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [code](<https://devfeed.tech/tags/code.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [git](<https://devfeed.tech/tags/git.md>), [github](<https://devfeed.tech/tags/github.md>), [scm](<https://devfeed.tech/tags/scm.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>)

## AI overview

Symlink attacks exploit the way operating systems transparently redirect symbolic links to other paths. A malicious symlink committed to a Git repository can cause build scripts, editors, or AI coding tools to access unintended files, potentially enabling remote code execution.

## Source excerpt

A harmless-looking symlink in a Git repo can redirect a tool into reading or writing anywhere on your machine. That old trick is now showing up in AI coding assistants, with nasty results.