Plan
active
AI agents vulnerable to prompt injection via email, web, and plugins
- Engineer — Learn: Prompt injection through untrusted content (emails, web pages, plugins) allowing agents to abuse their own permissions is a real attack class worth understanding before deploying agentic workflows; no patch or CVE — evaluate agent permission scoping and input sanitization in designs.
- SOC/IR — Skip
- Leader — Plan: AI agents acting on behalf of users are an emerging enterprise attack surface that needs an acceptable-use policy and governance framework before broad deployment; schedule a review of any approved agentic tools and their permission boundaries this quarter.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.