Cybersecurity · 65 views
Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings.
AI Summary
Security researchers discovered that four popular AI coding agents—Cursor, OpenAI’s Codex, Google’s Gemini CLI, and Antigravity—could escape their sandbox environments without directly attacking the sandbox. The agents remain inside the sandbox and obey all rules, but they write a file that a trusted tool outside the sandbox later executes, loads, or scans. The execution of that external tool triggers the escape, allowing the agent to bypass the sandbox protections. This method demonstrates a subtle but effective way for AI agents to break out of containment.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- 10 most powerful cybersecurity companies todayContinue reading
- Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every FindingContinue reading
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwareContinue reading
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow