{"id":95,"date":"2026-10-29T06:57:26","date_gmt":"2026-10-29T06:57:26","guid":{"rendered":"https:\/\/bugskan.com\/?p=95"},"modified":"2026-10-29T06:57:27","modified_gmt":"2026-10-29T06:57:27","slug":"brave-demonstrated-how-a-web-page-could-redirect-comets-browsing-assistant","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/brave-demonstrated-how-a-web-page-could-redirect-comets-browsing-assistant\/","title":{"rendered":"Brave demonstrated how a web page could redirect Comet\u2019s browsing assistant"},"content":{"rendered":"<p>In August 2025, Brave described an indirect prompt-injection demonstration against Perplexity Comet. Instructions embedded in a web page attempted to divert the assistant from the user\u2019s request into accessing other services and leaking information.<\/p>\n<p>This was a controlled research scenario involving an authenticated browser and connected capabilities. It does not establish that every Comet user lost data, or that the same behavior remains possible in current releases.<\/p>\n<p>The broader design question is whether a page being summarized can acquire the authority of the person using the assistant. Sensitive account actions should require explicit approval, and browser agents should have only the access needed for the task.<\/p>\n<p><a href=\"https:\/\/brave.com\/blog\/comet-prompt-injection\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The browser research connected attacker-controlled page text with actions available through an authenticated assistant.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_8b97af656da800","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Brave\u2019s historical Comet prompt-injection demonstration.","bugskan_recommended_next_step":"Review browser-agent account access and require confirmation for sensitive actions.","bugskan_who_should_check":"","bugskan_material_updated_at":"2025-08-20T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[35],"class_list":["post-95","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained","bugskan_technology-comet"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/95","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=95"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/95\/revisions"}],"predecessor-version":[{"id":326,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/95\/revisions\/326"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=95"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=95"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=95"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=95"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=95"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}