--- title: Prompt injection turned Google’s Antigravity file search... description: Security researchers at Pillar Security discovered a prompt injection vulnerability in Google's Antigravity IDE that could be exploited to achieve remote code... canonical: https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Prompt injection turned Google’s Antigravity file search into RCE | daily.dev og:description: Security researchers at Pillar Security discovered a prompt injection vulnerability in Google's Antigravity IDE that could be exploited to achieve remote code... og:url: https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8 og:image: https://api.daily.dev/og/posts/aY3pG8rL8.png og:image:alt: Prompt injection turned Google’s Antigravity file search into RCE og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Prompt injection turned Google’s Antigravity file search into RCE **[CSO Online](https://daily.dev/sources/csoonline)** · 3 min read · 0 upvotes · 0 comments ## Summary Security researchers at Pillar Security discovered a prompt injection vulnerability in Google's Antigravity IDE that could be exploited to achieve remote code execution (RCE). The flaw resided in the 'find_my_name' tool, which uses the 'fd' command-line utility for file searches. By injecting strings starting with '-' into the Pattern parameter, attackers could trick fd into executing arbitrary binaries instead of just searching files. Critically, this attack bypassed Antigravity's most restrictive protection, Secure Mode, because the tool is invoked before sandbox restrictions are evaluated. The attack could also be triggered via indirect prompt injection through malicious comments in public repository files. Google fixed the issue internally after it was reported in January and awarded a bug bounty. Researchers warn the industry must move toward execution isolation rather than relying solely on input sanitization. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool](https://daily.dev/posts/google-fixes-critical-rce-flaw-in-ai-based-antigravity-tool-v5s5ztvgs) · Dark Reading · 0 upvotes · 0 comments - [Antigravity Grounded\! Security Vulnerabilities in Google's Latest IDE · Embrace The Red](https://daily.dev/posts/antigravity-grounded-security-vulnerabilities-in-google-s-latest-ide-embrace-the-red-gg2ijsybu) · Embrace The Red · 34 upvotes · 2 comments - [Cybersecurity Researchers Uncover Flaw in Google AI Coding Tool](https://daily.dev/posts/cybersecurity-researchers-uncover-flaw-in-google-ai-coding-tool-38fhs0zr4) · DevOps.com · 1 upvotes · 0 comments - [Invisible Threats: Source Code Exfiltration in Google Antigravity – FireTail Blog](https://daily.dev/posts/invisible-threats-source-code-exfiltration-in-google-antigravity-firetail-blog-taqel1ga4) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#ai-security](https://daily.dev/tags/ai-security), [#appsec](https://daily.dev/tags/appsec), [#google](https://daily.dev/tags/google), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Prompt injection turned Google’s Antigravity file search into RCE","url":"https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8"},"datePublished":"2026-04-21T12:18:11.217Z","dateModified":"2026-10-14T02:33:21.365Z","description":"Security researchers at Pillar Security discovered a prompt injection vulnerability in Google's Antigravity IDE that could be exploited to achieve remote code...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4465a43b05abc1bfab5e5b81395f1280?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4465a43b05abc1bfab5e5b81395f1280?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/prompt-injection-turned-google-s-antigravity-file-search-into-rce-ay3pg8rl8","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-security,appsec,google,prompt-injection","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"Prompt injection turned Google’s Antigravity file search into RCE"}]} ```