Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Sign inBecome a Member
Home/AI Incident Database/Zero-click prompt injection through a calendar invite hijacks an agentic browser

Zero-click prompt injection through a calendar invite hijacks an agentic browser

A crafted Google Calendar invite that looked routine carried instructions the Comet browser's agent followed when it processed the user's calendar, letting it read local files and exfiltrate data with no user interaction beyond accepting the meeting.

Severity: HighAgentic browserZero-clickCalendar inviteLethal trifectaIndirect injection

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Submit incidentReport a correction or request removal

Related in AI Incident Database

Researchers' autonomous offensive agent gains full access to a consulting firm's internal AI platform in two hours

According to the security firm's disclosure, an autonomous agent pointed at the firm's internal generative AI platform with no credentials reached read and write access to its production database, including tens of…

Data exfiltration2026

ForcedLeak: indirect prompt injection exfiltrates CRM data from an enterprise agent

Instructions hidden in a web-to-lead form submission were later processed by an Agentforce agent, which followed them to query lead records and send the data to an attacker's domain that had been allowed by an…

Data exfiltration2025

EchoLeak: zero-click exfiltration from Microsoft 365 Copilot through a crafted email

An email containing instructions phrased for the recipient bypassed Copilot's injection classifier, was retrieved into context when the user asked an unrelated question, and caused Copilot to leak sensitive data…

Data exfiltration2025