CommetJacking attack tricks Comet browser into stealing emails

LayerX researchers disclosed a prompt-injection method called "CometJacking" that abuses the Comet AI browser's URL 'collection' parameter to deliver hidden instructions causing the agent to access connected services (such as Gmail and Google Calendar) and exfiltrate sensitive data (encoded in base64) to an attacker-controlled endpoint; Perplexity reviewed the reports and classified them as not applicable, and the proof-of-concept demonstrates a realistic, low-interaction data-exfiltration risk.