CVE-2026-22708

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 21, 2026

Last Seen

August 19, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Google's Antigravity IDE Vulnerability Allows Remote Code Execution via Prompt Injection70.5

Researchers at Pillar Security discovered a critical prompt injection vulnerability in Google's Antigravity IDE, which allows for remote code execution (RCE) by exploiting insufficient input sanitization in the find_by_name tool's Pattern parameter. This flaw enables attackers to inject command-line...

Docker Warns of AI Agent Vulnerability Leading to Arbitrary Code Execution69.0

On August 18, 2026, Docker revealed a critical vulnerability in AI coding agents that can lead to arbitrary code execution even when users approve seemingly safe commands. The flaw, identified as CVE-2026-22708, affects the AI code editor 'Cursor' and allows attackers to exploit environment variable...

Emerging Threats from AI Coding Assistants Exploited by Malicious Artifacts67.5

AI coding assistants like Claude Code and GitHub Copilot are vulnerable to prompt injection attacks that exploit unvetted external artifacts. These attacks can turn coding assistants into attackers' shells, executing unauthorized commands with developer privileges. Recent vulnerabilities, including...