Cases · Stage of use: in testing · Added to the register (date we first published it): last 30 days · Themes: hidden text

What happened	What went wrong	Severity	Earliest source
Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05	security breach	negligible	2026-10-05