AI Prompt Injection Vulnerability

A critical indirect prompt injection vulnerability was discovered in Perplexity's Comet AI assistant, allowing malicious instructions hidden in webpage content to be executed. This exploit enables the AI, operating with the user's full privileges, to bypass traditional web security and exfiltrate sensitive data like login credentials and OTPs from authenticated sessions across various services.

What Happened

A critical indirect prompt injection vulnerability was discovered in Perplexity's Comet AI assistant, allowing malicious instructions hidden in webpage content to be executed. This exploit enables the AI, operating with the user's full privileges, to bypass traditional web security and exfiltrate sensitive data like login credentials and OTPs from authenticated sessions across various services.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Aug 20, 2025 05:30

  BugSkan first recorded this incident.

• Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet - Brave
  Aug 20, 2025 05:30

  brave.com · Research

Sources

My AI Stack Match