A Google Calendar event with a malicious description could be abused to instruct Gemini to leak summaries of a victim’s private meetings.
Researchers found an indirect prompt injection flaw in Google Gemini that bypassed Calendar privacy controls and exposed ...