Misbehavior1 sourceFirst seen
Bard Gets Bard-Napped: A Shared Google Doc Asks the Chatbot to Spill Your Chat History
Ourtake
Google's chatbot read a document, obeyed it, and offered to mail out your chat history. Google fixed it. Shell code is natural language now.
What happened
A security researcher showed that Google Bard, given access to Drive, Docs and Gmail through Extensions, could be made to follow instructions hidden in a shared Google Doc and leak the user's chat history. The issue was reported to Google in September 2023, and Google confirmed a fix in October 2023. The exact fix was not publicly explained.