> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#9 BleepingComputer general July 20, 2026 at 21:14 UTC

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

By Ax Sharma

AI Summary

Researchers discovered sandbox escape vulnerabilities in four AI coding tools — Cursor, Codex (OpenAI), Gemini CLI, and Antigravity — by inducing AI agents to write files that trusted host tools subsequently execute, resulting in host-level code execution. Multiple CVEs were issued and patches released, but the attack class exposes a systemic trust boundary problem in agentic coding environments.

Read full article → https://www.bleepingcomputer.com/news/security/cur…

Relevance score: 82.0/100

# More from July 22

  1. 1
    Critical SharePoint RCE flaw exploited to steal machine keys BleepingComputer
  2. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  3. 3
    Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
  4. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  5. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  6. 6
    FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware BleepingComputer
  7. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  8. 8
    New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack The Hacker News
  9. 10
    HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 The Hacker News