Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Researchers exploited sandbox escapes in Cursor, Codex, Gemini CLI, and Antigravity by having AI agents write files executed by trusted host tools. The vulnerabilities led to multiple CVEs, patches, and Google downgrading two Antigravity findings.