Antigravity 0-day shows how DNS rebinding on loopback turns AI coding agents into RCE
evilsocket · x · 2026-09-17
- At TheSAS2026, Shielder co-founder Abdel Adim "smaury" Oisfi will demo a Google Antigravity 0-day: an unauthenticated DNS rebinding bug that leaks an agent's CSRF token and language server port, achieving RCE.
- Core thesis: AI coding agents are reopening a huge attack surface — not malicious prompts or sneaky MCPs, but a 90s-era bug class: the local loopback.
- A dangerous norm is forming: local dev servers, MCP servers, agent managers, and vibe-coded apps all pile onto loopback, all assuming neighboring processes are friendly.
More from coding & agent
- OpenClaw creator to join Cloudflare Connect 2026 panel on agentic platforms — steipete · 2026-09-17
- Your LLM doesn't understand MCP — keeping the tool-call boundary clear makes agents easier to debug — gethackteam · 2026-09-17
- YC-backed Extend launches Parse Router to route each page to the right parsing engine — ycombinator · 2026-09-17
- He had Codex make a phone call to redeem a $500 gift card — and it worked — brandon_galang · 2026-09-17
- Alchemy ships official coding-agent prompt for its TypeScript IaC tool — samgoodwin89 · 2026-09-17
- LangChain founder joins Navigators podcast: outcome-first agent building and model gateways as core infra — LangChain · 2026-09-17