HiddenLayer Gemini for Workspace Indirect Prompt Injection
Date: 2024-09
Affected: Google Gemini for Workspace
Attack vector: prompt-injection
Category: research
Severity: High

HiddenLayer found Gemini for Workspace susceptible to indirect prompt injection across its full product suite (Docs, Gmail, Slides), enabling content manipulation and data leakage.


Mitigations:

Architectural layers (MAESTRO):