Recent research highlights persistent 'indirect prompt injection' flaws across AI browsers, with OpenAI emphasizing multi-layered defenses while acknowledging unresolved vulnerabilities.
A study reported by simonwillison.net revealed systemic 'indirect prompt injection' vulnerabilities in AI browsers, including Brave’s Comet and Fellou, which could execute hidden commands from embedded text or images, risking data leaks such as emails or account information. OpenAI’s Chief Information Security Officer stated that ChatGPT Atlas employs layered security defenses to mitigate such threats but admitted that prompt injection remains an unsolved issue in AI systems.