Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Google Antigravity prompt-injection fix

Security Patch Release
First reported
Last updated
Happening score
H score 31
1 unique sources, 1 articles

Summary

Hide ▲

Google fixed Antigravity's prompt injection flaw in February, closing a path that could lead to sandbox escape and remote code execution (RCE). The patch followed a January report from researchers and addressed a weakness that bypassed the product's Secure Mode protections. The flaw mattered because it let a benign-looking prompt turn into a full compromise chain through the IDE's native tool execution flow.

Related Happenings

Skills.sh scanner blind spot for externally linked AI agent skills

Security Tool/Service
H score22 First: 23.06.2026 18:16 Last: 23.06.2026 18:16 Sources 1

About this happening: Security scanners for AI agent skills, including those wired into skills.sh, cleared a fake skill that hid its real payload behind stitch-design.ai, exposing a vetting...

Open Happening

Open-source admin tool zero-day 2FA bypass exploitation wave

Exploitation Wave
H score6 First: 11.05.2026 18:45 Last: 11.05.2026 18:45 Sources 1

About this happening: Google identified a mass vulnerability exploitation operation using a zero-day 2FA bypass against a popular open-source, web-based system administration tool, creating...

Open Happening

Google Gemini CLI workspace-trust hardening update

Security Patch Release
H score44 First: 30.04.2026 10:07 Last: 30.04.2026 10:07 Sources 1

About this happening: Google released a Gemini CLI security update that changes workspace-trust handling for headless CI workflows, reducing the risk that untrusted folders can trigger ho...

Open Happening

Google security patch release for CVE-2026-5858

Security Patch Release
H score16 First: 10.04.2026 13:44 Last: 10.04.2026 13:44 Sources 1

About this happening: Google released the first stable Chrome 147 build, closing 60 vulnerabilities and raising the browser’s baseline security ahead of broader deployment. The patch bundle...

Open Happening

Claude Code deny-rule bypass fix (version 2.1.90)

Security Patch Release
H score17 First: 08.04.2026 12:16 Last: 08.04.2026 12:16 Sources 1

About this happening: Anthropic released Claude Code version 2.1.90 last week to fix a command-parsing flaw that could let user-configured deny rules silently stop applying when a command e...

Open Happening

Timeline

  1. 21.04.2026 13:52 2 articles · 2mo ago

    Google Antigravity prompt-injection fix

    Initial Disclosure

    After a January report, Google fixed the Antigravity prompt-injection issue in February before the flaw could remain exposed in the shipped product. The patch addressed a weakness that had enabled sandbox escape and RCE through the IDE's tool flow.

    Show sources
    Open in new tab