Google's Antigravity allows for data exfiltration through indirect prompt injection, enabling attackers to manipulate the software to steal sensitive user data from IDEs. In an attack scenario, a user integrating Oracle ERP's AI Payer Agents exposes their credentials as Antigravity accesses a malicious site via a hidden prompt injection. Despite safeguards, the tool bypasses protections to exfiltrate data, showcasing serious vulnerabilities linked to its design and settings. Google's acknowledgment of these risks highlights the need for user vigilance amidst multiple agents operating simultaneously.
https://www.promptarmor.com/resources/google-antigravity-exfiltrates-data