Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution

Multiple critical prompt injection vulnerabilities have been discovered across AI-powered development tools and IDEs, allowing code execution and session hijacking.

• •Google's Antigravity IDE had a flaw allowing Strict Mode bypass through unvalidated input in the find_by_name tool's Pattern parameter, enabling arbitrary code execution via -X (exec-batch) flag injection.
• •Claude Code, GitHub Copilot, and Google Gemini CLI are vulnerable to Comment and Control attacks via GitHub comments, pull request titles, and issue bodies, leading to API key and token theft.
• •Cursor IDE's NomShub vulnerability combines indirect prompt injection with shell builtin sandbox escapes to grant persistent shell access when opening a malicious repository.
• •Claude's Claudy Day attack embeds hidden instructions in crafted URLs displayed as Google search ads to silently hijack user sessions and exfiltrate data.