Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
Researchers found flaws in several popular AI coding tools that could let harmful files or commands move from a protected workspace onto a user’s computer through trusted helper programs. Fixes are being released, so users should update these tools and be careful with AI-generated files and setup steps.
Who is at risk
People who use AI coding assistants such as Cursor, Codex, Gemini CLI, or Antigravity on their computers are most at risk, especially developers and technical staff.
What to watch for
Watch for unexpected files being created, unusual setup scripts, prompts to run commands you did not expect, or helper tools launching actions you did not approve.
What to do
Update these AI tools and related software immediately, avoid running AI-generated commands or files until updated, and review recent project files for anything unexpected.