Brave Software has disclosed that the Comet browser from Perplexity AI has a serious security vulnerability, allowing attackers to embed hidden commands in web pages to trick the AI assistant into leaking users' private data, including emails and code. Brave researchers demonstrated that when users asked Comet to summarize Reddit pages containing hidden commands, the AI assistant executed those commands. Although Perplexity claims the issue was fixed before it was discovered and states that no user data was leaked, Brave insists that the vulnerability could still be exploited weeks after the fix and warns that the design architecture of Comet makes it susceptible to further attacks. (Decrypt)