Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution

The vulnerability combines Antigravity's file-creation capabilities with insufficient input sanitization in the find_by_name tool to bypass Strict Mode. Attackers can inject the -X (exec-batch) flag through the Pattern parameter, forcing fd to execute arbitrary binaries. The attack exploits the fact that find_by_name tool call executes before Strict Mode constraints are enforced. By crafting a Pattern value of -Xsh, attackers cause fd to pass matched files to sh for execution as shell scripts. The attack can be initiated via indirect prompt injection using hidden attacker-controlled comments in seemingly harmless files.