2025-02 · 2025-Q1
Google Gemini Prompt Injection via Calendar Invites
Who actually said "do this"?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Google Gemini / Calendar / Smart Home
Impact
Unauthorized smart home control, private calendar data exfiltration, deceptive events - all zero-click; 73% of scenarios rated High-Critical
Root cause
Gemini processes hidden instructions in calendar event metadata
Sources
Catalog
Cite this: AgentProv incident record: Google Gemini Prompt Injection via Calendar Invites (2025-02). https://agentprov.com/incidents/2025-02-google-gemini-prompt-injection-via-calendar-invites
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction