Critical Vulnerability in GCP Dialogflow Allows Attackers to Inject Malicious Code

A critical vulnerability in Google Cloud Platform’s Dialogflow CX that lets attackers inject persistent malicious code into an organization’s AI-powered chatbot pipeline. The flaw, dubbed “Rogue Agent,” disclosed by Varonis Threat Labs, could silently exfiltrate conversations and enable large-scale phishing campaigns, requiring only a single edit permission to trigger. The exploit abused Playbook Code Blocks, a Dialogflow CX feature that lets developers embed custom Python logic to process user input and call external APIs within a Google-managed execution environment. GCP Dialogflow Vulnerability All agents using Code Blocks in the same GCP project share the same Cloud Run execution environment, and...

Læs hele artiklen hos kilden.