Brave Screenshot-Based Prompt Injection in AI Browsers
Date: 2025-10
Affected: Perplexity Comet (and other AI browsers)
Attack vector: prompt-injection
Category: research
Severity: High

Brave disclosed prompt injection via screenshots: payloads hidden in low-contrast text (e.g., light blue on yellow) become readable to vision models. Affects Comet and other AI browsers. Reported Oct 1, disclosed Oct 21 2025.


Mitigations:

Architectural layers (MAESTRO):