VV-025highPrompt injection2025-09-30
Gemini Trifecta: three injection flaws in Google’s Gemini suite
Tenable found three now-fixed vulnerabilities in Gemini Cloud Assist, the Search Personalization model and the Browsing tool that exposed users to privacy risks, including search-injection.
What it is
Published 30 September 2025. Each flaw let attacker-controlled content act as instructions to Gemini.
How to check
- No user patch; Google remediated server-side.
How to fix
- Limit what Gemini integrations can read in Google Cloud and Workspace.
Sources
More advisories for this tool