THE HIDDEN RISK IN NOTION 3.0 AI AGENTS: WEB SEARCH TOOL ABUSE FOR DATA EXFILTRATION

Summary from the TLDR Web Dev newsletter

CodeIntegrity discovered a vulnerability in Notion 3.0's AI Agents related to its web search tool that allows for data exfiltration. By embedding a malicious prompt within a seemingly harmless PDF, attackers can trick the AI agent into querying a controlled server with sensitive data extracted from the user's Notion pages. This indirect prompt injection attack exploits the agent's tool access.