Security
Bug Report
Indirect prompt injection: our tool-calling agent obeyed instructions in a document
In a red-team exercise our support agent read a customer-uploaded PDF with hidden instructions and drafted an email with another customer's order details. No data left the building, but the flaw was real. How we contained it with least privilege, confirmation and output checks.