Overview
Noma Labs discovered GeminiJack, a critical indirect prompt injection vulnerability in Google Gemini Enterprise / Vertex AI search that completely collapses the trust boundary between user data and AI instructions.
Impact
Any attacker who can share a document, send an email, or create a calendar event can embed hidden instructions that Gemini / Vertex executes as legitimate commands, automatically exfiltrating sensitive data from every connected source without user interaction.
The Google Gemini Zero-Click Vulnerability Leaked Gmail, Calendar and Docs Data
GeminiJack attack path
Watch: Straight from Noma Labs
Learn how the Noma Labs research team was able to exfiltrate sensitive data from Gemini Enterprise.
Table of Contents
