Antigravity 0-day shows how DNS rebinding on loopback turns AI coding agents into RCE
evilsocket · x · 2026-09-17
- At TheSAS2026, Shielder co-founder Abdel Adim "smaury" Oisfi will demo a Google Antigravity 0-day: an unauthenticated DNS rebinding bug that leaks an agent's CSRF token and language server port, achieving RCE.
- Core thesis: AI coding agents are reopening a huge attack surface — not malicious prompts or sneaky MCPs, but a 90s-era bug class: the local loopback.
- A dangerous norm is forming: local dev servers, MCP servers, agent managers, and vibe-coded apps all pile onto loopback, all assuming neighboring processes are friendly.
More from coding & agent
- Microsoft's MemSteer turns unlabeled user histories into agent memory supervision — MicrosoftResearch · 2026-11-02
- She fired herself from her own Instagram: AI agent runs the account, views up 82.3% — heyshrutimishra · 2026-11-02
- Sourcegraph: AI writes code faster than teams can review it, driving more outages — AI Engineer · 2026-11-02
- Tsinghua & Microsoft's HarnessMM cuts agent token use by up to 87.93% while raising success rate — rohanpaul_ai · 2026-11-02
- GitHub launches Agent HQ: Anthropic, OpenAI, Google coding agents in Copilot — emmanuelvivier · 2026-11-02
- DeepSeek open-sources Super-Agent, a coding agent that reads team chats to minimize human input — emmanuelvivier · 2026-11-02