Skip to content
badbots.news
MisbehaviorSerious1 sourceFirst seen
Picture from the promptarmor.com article
Image: promptarmor.com

Ramp's Sheets AI Gets Tricked Into Mailing Your Financials to a Stranger

Ourtake

An agent that writes formulas without asking first will happily write one that phones home.

What happened

Security firm PromptArmor found that an indirect prompt injection hidden in an external dataset could make Ramp's Sheets AI insert a malicious formula that sent confidential financial data to an attacker's server without user approval. PromptArmor disclosed the issue to Ramp in February 2026, and Ramp says it was resolved on March 16, 2026.

Source