AI Prompt Injection Vulnerability

Researchers have identified critical prompt injection vulnerabilities in AI browsers, such as Perplexity's Comet, where embedded, imperceptible instructions within screenshots can bypass security mechanisms. This flaw allows autonomous AI agents, operating with user-authenticated privileges, to execute malicious actions like accessing sensitive accounts or navigating to attacker-controlled websites.

What Happened

Researchers have identified critical prompt injection vulnerabilities in AI browsers, such as Perplexity's Comet, where embedded, imperceptible instructions within screenshots can bypass security mechanisms. This flaw allows autonomous AI agents, operating with user-authenticated privileges, to execute malicious actions like accessing sensitive accounts or navigating to attacker-controlled websites.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Oct 23, 2025 05:30

  BugSkan first recorded this incident.

• Researchers Find Severe Vulnerabilities in AI Browser - Futurism
  Oct 23, 2025 05:30

  futurism.com · Research

Sources

My AI Stack Match