Notion AI agents are at risk of prompt injection, which may lead to user data leakage

Foresight News reported that researcher Abi Raghuram stated that the AI agent released by the Web2 productivity application Notion is at risk of prompt injection. Attackers can embed hidden text (such as white font) that is invisible to the naked eye in files like PDFs. When users submit such files to the agent for processing, the agent will read the hidden prompts and execute instructions accordingly, potentially sending sensitive information to external addresses.