New Attack Tricks AI Agents Into Misclicks and Malicious Commands

A novel 'agent data injection' attack poisons the data AI agents rely on, causing them to perform unintended actions like clicking 'Buy Now' or running attacker commands. The attack exploits the agent's trust in external data sources, such as product reviews or GitHub comments, without hijacking the task itself. Researchers warn this vulnerability is widespread across current AI agent implementations.