gcdRadar
live/Research/AIR-2026-1907
liveliveResearch1 Research / proof of conceptAI

Gmail AI summary misinterprets phishing email as USPTO appointment

Gmail AI summary

An AI summarization feature in an email client misparsed a phishing message, presenting it as a legitimate official appointment. The incident highlights vulnerabilities in AI email parsing where untrusted input manipulates summary output.

why this severityDemonstrated AI summary misinterpretation of phishing content.

affected
Gmail AI summary
first report
11 Nov 2026
last update
11 Nov 2026

Timeline · 1

  1. 11 Nov 2026Gmail's AI summary presented a phishing email as a USPTO appointment

Sources · 1

News and write-ups

  1. 2026-11-11
    Gmail's AI summary presented a phishing email as a USPTO appointment
    projectsapiens.ai · projectsapiens.ai/images/gmail-phishing/gmail-ai-phishing-redacted.png

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Prompt injection
severity
1 · Research / proof of concept
targets
Google
dates
happened 11 Nov 2026 · first reported 11 Nov 2026
origin
News & research feeds
record
confidence 0.85 · created 2026-11-11 17:40Z · updated 2026-11-11 17:40Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Gmail AI summary misinterprets phishing email as USPTO appointment

https://gcdradar.vercel.app/incidents/gmail-ai-summary-misinterprets-phishing-email-as-uspto-appoi · AIR-2026-1907 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Demonstrated AI summary misinterpretation of phishing content.
- Fix status: Fix status unknown
- First reported: 2026-11-11
- AI role: Attack on AI
- Products: Gmail AI summary

## Summary

An AI summarization feature in an email client misparsed a phishing message, presenting it as a legitimate official appointment. The incident highlights vulnerabilities in AI email parsing where untrusted input manipulates summary output.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: Gmail AI summary

## Latest updates

- 2026-11-11: Gmail's AI summary presented a phishing email as a USPTO appointment (https://projectsapiens.ai/images/gmail-phishing/gmail-ai-phishing-redacted.png)

## Sources

- 2026-11-11 projectsapiens.ai: Gmail's AI summary presented a phishing email as a USPTO appointment https://projectsapiens.ai/images/gmail-phishing/gmail-ai-phishing-redacted.png

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    AI
  2. closed
    AI
  3. live
    AI
  4. live
    AI
  5. live
    AI
  6. live
    AI