2024-08-20 · 2024-Q3
Slack AI Prompt Injection and Data Exfiltration
Layer tags: not yet tagged.
Target
Slack AI
Impact
Data exfiltrated from private channels; API keys stolen via crafted public channel messages
Root Cause
Indirect prompt injection through public channel messages; Markdown link rendering enabled exfiltration