Promptware: Google Calendar invitations as prompt-injection vector for Gemini
Date: 2025-09
Affected: Google Gemini / Workspace
Attack vector: prompt-injection
Category: real-world
Severity: High

Researchers ('Invitation Is All You Need') demonstrated that embedding adversarial prompts in Google Calendar invitation descriptions could plant dormant instructions that Gemini executed when triggered by normal user queries, enabling silent data exfiltration without any malicious code.


Mitigations:

Architectural layers (MAESTRO):