Pillar Security researchers disclosed a prompt-injection-to-remote-code-execution chain in Google’s Antigravity agentic IDE, nicknamed “Groundfall.” The flaw exploited unsanitized input in the IDE’s file-search tool, letting an attacker smuggle command-line flags through a crafted search pattern to execute arbitrary binaries, and the attack bypassed Antigravity’s most restrictive “Secure Mode” setting because the vulnerable tool sat outside the boundary that mode checks. An attacker could trigger it indirectly by embedding adversarial instructions in a public repository’s source comments, which a developer’s agent would then execute while processing the file. Google patched the flaw and paid a bug bounty; no in-the-wild exploitation was reported.