PerplexedBrowser -- Perplexity Comet Agentic Browser Vulnerabilities
Date: 2026-03
Affected: PerplexedBrowser
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Three separate disclosures: CometJacking (one-click URL manipulation exfiltrates data, LayerX Oct 2025), PerplexedBrowser (zero-click attacks via calendar invites exfiltrate local files and hijack 1Password accounts, Zenity Labs Mar 2026), and Trail of Bits audit (four prompt injection techniques extracting private Gmail data, Feb 2026). All patched.


Mitigations:

Architectural layers (MAESTRO):