Prompt Injection leads to RCE and Sandbox Escape in Antigravity

Pillar Security discovered and disclosed a command-injection vulnerability in Antigravity's find_by_name tool where the Pattern parameter is passed unsanitized to the fd utility; by injecting a flag like -Xsh an attacker can execute staged files, bypassing Antigravity's Secure Mode. The report includes a proof-of-concept, root-cause analysis (no input validation and missing argument termination), an indirect prompt-injection attack vector, and a disclosure timeline showing the issue was fixed.