Misbehavior1 sourceFirst seen
Amazon Q Was Told to Hide Secrets in a Link. It Had Other Plans, Then Got Patched.
Ourtake
Your chatbot will happily read a file that says 'click here to sign in' and believe every word of it.
What happened
A security researcher found that an indirect prompt injection hidden in an uploaded file could make Amazon Q for Business output markdown links that carry sensitive chat history to an attacker's site. The researcher reported it to AWS in December 2023, and AWS deployed a fix on December 29, 2023 that replaces URLs with a placeholder.