Perplexity AI Browser Flaw Could Let Calendar Invites Access Local Files

Security researchers disclosed a PleaseFix class vulnerability in Perplexity’s Comet agentic browser that could let hidden prompts (for example, in calendar invitations) instruct the AI agent to access local file:// resources and exfiltrate documents and credentials while acting within authenticated sessions; Perplexity released patches after disclosure, including a second fix to block file:// access and close the demonstrated attack path.