Collected research
Hacking Gemini: A Multi-Layered Approach
Gemini renders model output through several layers, and its linkifier does not count an exclamation mark as part of a hostname, so injected text can flip a trusted link into a Markdown image. Chained with indirect prompt injection and a bypass of the escaping applied on export, it exfiltrates workspace data such as mail, calendar and drive content.
Record
- Researcher
- Valentino Massaro
- Published by
- Valentino’s issue tracker
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Valentino Massaro, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .