NotebookLM Reads a Customer List, Obeys the Hidden Note, Mails Your Data to a Stranger's Server

What happened

A security researcher showed that Google's NotebookLM could be manipulated by a prompt injection hidden in a customer record, causing it to render attacker-controlled image links that send data from other documents to an external server. The flaw was disclosed to Google in December 2023. The article says a fix for the image exfiltration was deployed after the April 2024 publication.