BlockBeats news, on August 26, security company Brave Software disclosed that Perplexity AI has a serious security vulnerability in its browser named Comet, which allows attackers to embed hidden commands within webpages to trick the AI assistant into leaking users' private data, including emails and code. Brave researchers demonstrated that when users ask Comet to summarize a Reddit page containing hidden commands, the AI assistant executes those commands. Although Perplexity claims the issue was fixed before it was discovered and states that no user data was leaked, Brave insists that the vulnerability can still be exploited weeks after the fix, warning that Comet's design architecture makes it susceptible to further attacks. (Decrypt)
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Security Agency: Perplexity Comet browser has a data leakage security vulnerability.
BlockBeats news, on August 26, security company Brave Software disclosed that Perplexity AI has a serious security vulnerability in its browser named Comet, which allows attackers to embed hidden commands within webpages to trick the AI assistant into leaking users' private data, including emails and code. Brave researchers demonstrated that when users ask Comet to summarize a Reddit page containing hidden commands, the AI assistant executes those commands. Although Perplexity claims the issue was fixed before it was discovered and states that no user data was leaked, Brave insists that the vulnerability can still be exploited weeks after the fix, warning that Comet's design architecture makes it susceptible to further attacks. (Decrypt)