Prompt-Based Attacks Against Gemini via Calendar Invitations

# Prompt-Based Attacks Against Gemini via Calendar Invitations

https://gcdradar.vercel.app/incidents/prompt-based-attacks-against-gemini-via-calendar-invitations · AIR-2026-0361 · closed 2026-08-14

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-07-31 (happened 2025-08-06)
- AI role: Attack on AI
- Products: Gemini

## Summary

Researchers demonstrated how malicious instructions embedded in Google Calendar invitations and shared files could influence Gemini assistants during retrieval. The indirect prompt injection caused the model to misuse authorized tools.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-07-31: Invitation Is All You Need: Hacking Gemini (https://safebreach.com/blog/invitation-is-all-you-need-hacking-gemini)
- 2026-07-31: Prompt-Based Attacks Against Gemini via Calendar Invitations (https://atlas.mitre.org/studies/AML.CS0063)

## Sources

- 2026-07-31 MITRE ATLAS: Prompt-Based Attacks Against Gemini via Calendar Invitations https://atlas.mitre.org/studies/AML.CS0063
- 2026-07-31 safebreach.com: Invitation Is All You Need: Hacking Gemini https://safebreach.com/blog/invitation-is-all-you-need-hacking-gemini

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.