Checkmarx Zero

OWASP catalogues an attack that forges the approval dialog guarding AI agents

The write-up names three ways attacker-controlled text can reshape what an approval prompt shows, and cites one Checkmarx demonstration against Claude Code. It carries no measure of how often a doctored dialog actually fools a human.