Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

Google patched a critical Dialogflow CX vulnerability called "Rogue Agent" disclosed by Varonis, where abuse of the Code Blocks feature and the dialogflow.playbooks.update permission could let an attacker inject persistent malicious code to exfiltrate conversations and facilitate large-scale phishing; the issue has been fixed and there are no known compromises.