One poisoned document hijacks Google's Gemini 3.1 Pro agent: it scans your Drive, harvests secret-shaped keys, plants persistent artifacts, and sends everything out through Google's own fetcher — from Google IP space.
security gemini security-research ai-security vulnerability-disclosure llm prompt-injection llm-agent llm-security llm-agents gemini-pro gemini-ai agentic-workflow agentic-ai prompt-injection-llm-security ai-security-tool prompt-injections ai-security-research ai-security-engineer securityai
-
Updated
Oct 24, 2026