LayerX CometJacking: One-Click Perplexity Comet Compromise
Date: 2025-10
Affected: Perplexity Comet
Attack vector: data-exfiltration
Category: research
Severity: High

LayerX disclosed CometJacking - clicking a crafted URL causes Comet to parse query strings as agent instructions, triggering data lookup in connected services and memory exfiltration.


Mitigations:

Architectural layers (MAESTRO):