Vulnerability / research

Antigravity native tool bypass permits code execution

Reported

What happened

Researchers showed that malicious project content could steer Antigravity into a native file-search tool flaw, executing commands outside Secure Mode restrictions.

Parties and reporting

AI tools and systems: Google Antigravity, fd

Outcome

Google accepted the report and marked the issue fixed on February 28, before the April public disclosure.

Operating lesson

Apply command validation and sandbox restrictions to native tools as well as explicit shell tools.

Evidence and limits

Research proof of concept, privately reported in January. No in-the-wild exploitation established by this report.

Sources