Researchers escaped four top AI coding agents’ sandboxes without ever breaking them

Security researchers found methods to bypass sandbox protections in four AI coding agents—Cursor, OpenAI's Codex, Google's Gemini CLI, and Antigravity—by exploiting trusted file interactions without breaking the sandbox itself. These vulnerabilities involve prompt injections and trusted file executions, leading to potential command execution on developers' machines. Most issues have been patched except for some downgraded by Google, highlighting the need to reconsider agent security beyond just隔