Driver tricks dealership chatbot into selling Chevrolet for USD 1 (Watsonville-style incident)
Date: 2023-12
Affected: Chevy of Watsonville (Fullpath / ChatGPT integration)
Attack vector: prompt-injection
Category: real-world
Severity: Medium

A customer used prompt injection to manipulate a ChatGPT-powered car-dealership chatbot into 'agreeing' to sell a 2024 Chevrolet Tahoe for one US dollar 'with no take-backsies', demonstrating jailbreak/agent-hijack risk in unsupervised commerce bots and triggering broader scrutiny of LLM-front-ended retail.


Mitigations:

Architectural layers (MAESTRO):