Gemini Saved a Stranger's Homework and Did It Two Messages Later

What happened

A security researcher found that a prompt injection hidden in an email could plant instructions in Google Gemini's chat context. The instructions triggered the Workspace Extension in a later conversation turn, pulling a Google Doc's content into the chat without the user explicitly approving it. Google fixed the related data exfiltration issue, and the researcher said it was still unclear how Google would address this behavior.