Archive · 27 Nov 2025
Antigravity AI Coding Platform Faces Security Concerns
Google recently launched Antigravity, a new AI-powered coding platform that lets users deploy AI agents to work on code automatically.
However, security researchers have found serious flaws in the system.
They say that if a workspace is hacked, bad code can be hidden and run every time the application starts, even after the project is closed.
This can happen on both Windows and Mac computers.
Google is aware of these issues and is looking into them.
They also know about other risks, like the AI agents being tricked into stealing data or running harmful commands.
The company is working to fix these problems.
Antigravity, Google's new AI agent-driven coding platform, has multiple vulnerabilities less than 24 hours after its launch.
Security flaw allows backdoor attacks via compromised 'trusted workspaces', embedding malicious code that runs on every application launch.
Vulnerability affects both Windows and Mac PCs, according to Aaron Portnoy of Mindgard.
Google acknowledges two other security risks: data exfiltration and malicious code execution via prompt injection attacks.
Google is investigating the reported vulnerabilities and is aware of the additional security risks.
- Who
- Google and security researchers, including Aaron Portnoy from Mindgard
- What
- Security vulnerabilities in Antigravity, Google's new AI agent-driven software development platform
- When
- Less than 24 hours after its launch on November 18
- Where
- Windows and Mac PCs
- Why
- Due to the platform's requirement for users to work inside a 'trusted workspace', which can be compromised and used to embed malicious code
- Platform Name
- Antigravity
- Developer
- Launch Date
- November 18
- Vulnerability Type
- Backdoor attacks via compromised workspaces
- Affected Systems
- Windows and Mac PCs
- Security Researcher
- Aaron Portnoy, Mindgard
- Known Issues
- Data exfiltration and malicious code execution via prompt injection