# google-patches-antigravity-ide-prompt-injection-sandbox-escape: Google Patches Antigravity IDE Prompt Injection Sandbox Escape

> Google Patches Antigravity IDE Prompt Injection Sandbox Escape is a high-severity remote code execution issue in Google Antigravity IDE, an AI agent. Affected: Google Antigravity IDE (pre-Feb 28 2026 patch).

- **Canonical URL:** https://catalog.anomity.ai/vuln/google-patches-antigravity-ide-prompt-injection-sandbox-escape
- **Aliases:** ti-016
- **Severity:** high
- **Attack type:** Remote code execution, Prompt injection, Sandbox escape
- **Component:** Google Antigravity IDE (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-04-21
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/google-patches-antigravity-ide-prompt-injection-sandbox-escape

## Summary

Pillar Security researchers discovered a prompt injection vulnerability in Google's Antigravity agentic IDE that allowed arbitrary code execution by escaping the AI sandbox. By injecting the -X (exec-batch) flag through the find_by_name tool's Pattern parameter, an attacker could force fd to execute arbitrary binaries against workspace files. Combined with Antigravity's file-creation capabilities, this enables a full attack chain bypassing Strict Mode without user interaction once the prompt injection lands.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Google Antigravity IDE (pre-Feb 28 2026 patch) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run Google Antigravity IDE (pre-Feb 28 2026 patch).

## How do I fix it?

Update Google Antigravity to latest version. Restrict AI agent file system access to project directories only. Audit IDE agent tool permissions. Avoid processing untrusted code or prompts in agentic IDE environments.

## How do I find every machine running Google Antigravity IDE?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Google Antigravity IDE and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/04/google-patches-antigravity-ide-flaw.html

## Related vulnerabilities

- [manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction](https://catalog.anomity.ai/vuln/manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction) — high
- [openai-codex-two-sandbox-escapes-apply-patch-overpatch-in-codex-cli-and](https://catalog.anomity.ai/vuln/openai-codex-two-sandbox-escapes-apply-patch-overpatch-in-codex-cli-and) — high
- [CVE-2026-82533](https://catalog.anomity.ai/vuln/cve-2026-82533) — critical
- [CVE-2025-68668](https://catalog.anomity.ai/vuln/cve-2025-68668) — critical
- [prompt-injection-is-not-the-bug-check-point-discloses-11-flaws-inside](https://catalog.anomity.ai/vuln/prompt-injection-is-not-the-bug-check-point-discloses-11-flaws-inside) — high
- [CVE-2026-48124](https://catalog.anomity.ai/vuln/cve-2026-48124) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=google-patches-antigravity-ide-prompt-injection-sandbox-escape