Gemini Zero-Click Vulnerability Allowed Attackers to Access Gmail, Calendar, and Docs

A critical zero-click architectural flaw dubbed "GeminiJack" in Google Gemini Enterprise/Vertex AI Search allowed attackers to plant poisoned content in Docs, Calendar events, or emails that RAG-based searches would retrieve and cause the AI to exfiltrate sensitive Workspace data (Gmail, Calendar, Docs) via disguised HTML image requests; Google separated Vertex AI Search from Gemini and patched RAG instruction handling, and the report warns organizations to limit data sources and monitor RAG pipelines to mitigate AI-native prompt-injection risks.