Brave reveals how Perplexity's AI browser gets hijacked by a Reddit comment
Brave just exposed a critical indirect prompt injection flaw in Perplexity's Comet browser assistant. Simply clicking "summarize" on a poisoned webpage lets hidden text trick the AI into reading private Gmail auth codes from another tab and taking over accounts. Why it matters: Agentic browsers completely bypass traditional web security boundaries, and reliable fixes are still nowhere in sight.