{"id":121,"date":"2026-10-29T07:04:24","date_gmt":"2026-10-29T07:04:24","guid":{"rendered":"https:\/\/bugskan.com\/?p=121"},"modified":"2026-10-29T07:04:25","modified_gmt":"2026-10-29T07:04:25","slug":"braves-screenshot-tests-show-prompt-injection-can-arrive-as-pixels","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/braves-screenshot-tests-show-prompt-injection-can-arrive-as-pixels\/","title":{"rendered":"Brave\u2019s screenshot tests show prompt injection can arrive as pixels"},"content":{"rendered":"<p>Brave\u2019s follow-up research on agentic browsers examined instructions embedded in screenshots and other page content. The researchers described tests involving Comet and additional browser assistants, with disclosures coordinated with the vendors.<\/p>\n<p>The important boundary is not simply text versus images. Content being interpreted for a user can still contain instructions from somebody else, and an assistant may have access to accounts or tools that the content\u2019s author does not.<\/p>\n<p>This historical research does not establish current exploitability across every browser release. Review agent permissions, isolate sensitive accounts where practical and require confirmation before an assistant sends information or changes account state.<\/p>\n<p><a href=\"https:\/\/brave.com\/blog\/unseeable-prompt-injections\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Research on AI browsers explored nearly invisible image instructions alongside conventional page-based attacks.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_49420d66061c30","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Brave\u2019s disclosed browser-agent research scenarios.","bugskan_recommended_next_step":"Test visual inputs as well as page text when evaluating browser-agent security.","bugskan_who_should_check":"","bugskan_material_updated_at":"","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[],"class_list":["post-121","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=121"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/121\/revisions"}],"predecessor-version":[{"id":342,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/121\/revisions\/342"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=121"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=121"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}