importantSYS.SOURCE: The Hacker News• 2026-07-07T22:07:33+05:30

Rogue Agent Flaw Allowed Attackers to Hijack Google Dialogflow CX Chatbots via Code Block Execution

#AI Security#Cloud Security#Vulnerability#Dialogflow CX#Insider Threat

A critical flaw allowed an attacker with specific permissions to compromise other Code Block-enabled agents in the same Google Cloud project, enabling them to read conversations, steal data, and manipulate bot responses. This vulnerability was categorized as a 'Rogue Agent' flaw, which exploited a shared, unisolated runtime environment for custom Python code execution.

A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project.

From there, they could read live conversations, steal the data users shared, and make the bots send attacker-written messages, including requests to re-enter a password.

Security firm Varonis found it

Read original article

*** END OF TRANSMISSION ***

> DISCOVERY OF -YEAR-OLD LINUX KERNEL FLAW (CVE--) ALLOWS ROOT AND CONTAINER ESCAPE > CISA UPDATES KEV CATALOG WITH FOUR ACTIVELY EXPLOITED VULNERABILITIES IN ADOBE, JOOMLA, AND LANGFLOW > EXPLOITING PROMPT INJECTION IN GITHUB AGENTIC WORKFLOWS TO ACCESS PRIVATE REPOSITORIES > OPENAI ANNOUNCES PUBLIC LAUNCH OF GPT-. SOL, TERRA, AND LUNA THIS THURSDAY > IMPLEMENTING A MINIMAL ZFS NAS USING DEBIAN AND SAMBA WITHOUT COMMERCIAL NAS SOLUTIONS > GUIDE TO IMAGING AND PRESERVING 8-INCH, 5.25-INCH, 3.5-INCH, AND 3-INCH FLOPPY DISKS > ANALYSIS OF THE ACCURACY AND RELIABILITY OF THE ECONOMIST'S ECONOMIC REPORTING > OFFICIAL LINEAGEOS PROJECT STATISTICS AND METRICS > CHIPTUNE RADIO: CONTINUOUS STREAM OF 8-BIT AND TRACKER MUSIC > THE MATHEMATICAL BASIS AND APPLICATIONS OF BENFORD'S LAW IN REAL-WORLD DATASETS> DISCOVERY OF -YEAR-OLD LINUX KERNEL FLAW (CVE--) ALLOWS ROOT AND CONTAINER ESCAPE > CISA UPDATES KEV CATALOG WITH FOUR ACTIVELY EXPLOITED VULNERABILITIES IN ADOBE, JOOMLA, AND LANGFLOW > EXPLOITING PROMPT INJECTION IN GITHUB AGENTIC WORKFLOWS TO ACCESS PRIVATE REPOSITORIES > OPENAI ANNOUNCES PUBLIC LAUNCH OF GPT-. SOL, TERRA, AND LUNA THIS THURSDAY > IMPLEMENTING A MINIMAL ZFS NAS USING DEBIAN AND SAMBA WITHOUT COMMERCIAL NAS SOLUTIONS > GUIDE TO IMAGING AND PRESERVING 8-INCH, 5.25-INCH, 3.5-INCH, AND 3-INCH FLOPPY DISKS > ANALYSIS OF THE ACCURACY AND RELIABILITY OF THE ECONOMIST'S ECONOMIC REPORTING > OFFICIAL LINEAGEOS PROJECT STATISTICS AND METRICS > CHIPTUNE RADIO: CONTINUOUS STREAM OF 8-BIT AND TRACKER MUSIC > THE MATHEMATICAL BASIS AND APPLICATIONS OF BENFORD'S LAW IN REAL-WORLD DATASETS