{“lastseen”:”2025-10-29T14:05:12″,”description”:”It seems that with every new agentic browser we discover yet another way to abuse one.\\n\\nOpenAI recently introduced a ChatGPT based AI browser called Atlas. It didn\u2019t take researchers long to find that the combined search and prompt bar\u2014called the Omnibox\u2014can be exploited. \\n\\nBy pasting a specially crafted link into the Omnibox, attackers can trick Atlas into treating the entire input as a trusted user prompt instead of a URL. That bypasses many safety checks and allows injected instructions to be run with elevated trust.\\n\\nArtificial Intelligence (AI) browsers are gaining traction, which means we may need to start worrying about the potential dangers of something called \u201cprompt injection.\u201d We’ve discussed the dangers of prompt injection before, but the bottom line is simple: when you give your browser the power to act on your behalf, you also give criminals the chance to abuse that trust.\\n\\nAs researchers at Brave noted:\\n\\n\\u003e \u201cAI-powered browsers that can take actions on your behalf are powerful yet extremely risky. If you\u2019re signed into sensitive accounts like your bank or your email provider in your browser, simply summarizing a {specially fabricated} Reddit post could result in an attacker being able to steal money or your private data.\u201d\\n\\nAxios reports that Atlas\u2019s dual-purpose Omnibox opens fresh privacy and security risks for users. That\u2019s the downside of combining too much functionality without strong guardrails. But when new features take priority over user security and privacy, those guardrails get overlooked.\\n\\nDespite researchers demonstrating vulnerabilities, OpenAI claims to have implemented protections to prevent any real dangers. According to its help page:\\n\\n\\u003e \u201cAgent mode runs also operates under boundaries:\\n\\u003e \\n\\u003e System access: Cannot run code in the browser, download files, or install extensions.\\n\\u003e \\n\\u003e Data access: Cannot access other apps on your computer or your file system, read or write ChatGPT memories, access saved passwords, or use autofill data.\\n\\u003e \\n\\u003e Browsing activity: Pages ChatGPT visits in agent mode are not added to your browsing history.\\”\\n\\nAgentic AI browsers like OpenAI\u2019s Atlas face a fundamental security challenge: separating real user intent from injected, potentially malicious instructions. They often fail because they interpret any instructions they find as user prompts. Without stricter input validation and more robust boundaries, these tools remain highly vulnerable to prompt injection attacks\u2014with potentially severe consequences for privacy and data security.\\n\\n* * *\\n\\n**We don ‘t just report on privacy\u2014we offer you the option to use it.**\\n\\nPrivacy risks should never spread beyond a headline. Keep your online privacy yours by using Malwarebytes Privacy VPN.”,”published”:”2025-10-29T13:48:06″,”modified”:”2025-10-29T13:48:06″,”type”:”malwarebytes”,”title”:”OpenAI\\u0026#8217;s Atlas browser leaves the door wide open to prompt injection”,”source”:””,”references”:””,”id”:”MALWAREBYTES:598458A45CAB90795BD8E365FCAC3C25″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/openais-atlas-browser-leaves-the-door-wide-open-to-prompt-injection”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-29T14:05:12″,”description”:”It seems that with every new agentic browser we discover yet another way to abuse one.\\n\\nOpenAI recently introduced a ChatGPT based AI browser called Atlas….<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-23902","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n