Google Gemini Flaw Allows Access to Private Meeting Details Through Calendar Events

Researchers at Miggo discovered a prompt-injection vulnerability in Google Gemini’s Calendar integration that allowed maliciously crafted text in event descriptions to instruct Gemini to summarize and leak private meeting details into a newly created calendar event; Google patched the issue after responsible disclosure, and the report warns that semantic attacks against language-model-powered application layers require new AppSec approaches such as intent validation and runtime semantic monitoring.