Google Jules is Vulnerable To Invisible Prompt Injection
The latest Gemini models quite reliably interpret hidden Unicode Tag characters as instructions . This vulnerability, first reported to Google over a year ago, has not been mitigated at the model or API level, hence now affects all applications built on top of Gemini. This includes Google’s own products and services, like Google Jules. Hopefully, this post helps raise awareness of this emerging threat.
Summary from Embrace The Red.
Explained
The technology and terms in this story. Learn more
