Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution

The Hacker News

·

原始报道

↗ The Hacker News

Cybersecurity researchers have discovered a vulnerability in Google's agentic integrated development environment (IDE), Antigravity, that could be exploited to achieve code execution. The flaw, since patched, combines Antigravity's permitted file-creation capabilities with an insufficient input sanitization in Antigravity's native file-searching tool, find_by_name, to bypass the program's Strict