Observed Signal · Aug 26, 2025 · Security Vulnerability Disclosure · Source: Trending Topics · Impact: 2/5 · Sentiment: Negative

Perplexity's Comet AI Browser Found Vulnerable to Prompt Injection

Executive Signal Summary

Perplexity's AI browser Comet, currently available to paying users, has a security vulnerability. Researchers at Brave Software discovered a prompt injection flaw that allows attackers to embed hidden commands in web content. A proof-of-concept using a Reddit comment could trick the assistant into extracting account details and requesting one-time passwords. The vulnerability was reported on July 1, 2025, and publicly disclosed on August 20, 2025. Perplexity said the issue was patched before anyone noticed and that no user data was compromised. Brave reported that later tests showed the fix was incomplete. Security experts warn that traditional mechanisms like same-origin policy and CORS are ineffective against AI assistants acting with full user rights. Proposed protections include separating user instructions from web content, requiring explicit user interaction for sensitive actions, and isolating agentic browsing.

Polaris7 AgentPolaris7 Strategic Assessment
High Confidence

Highlights security risks in AI-powered browsers and agentic AI systems, affecting trust and adoption of AI-driven web automation; relevant to AI infrastructure but not directly adtech-specific.

SIGNAL RADAR

Track Perplexity Signals & Market Shifts in Real-Time

Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.

Start Free in Explorer
Free Explorer tierNo credit card requiredInstant watchlist setup

Key Takeaways & Evidence Grounding

  • Researchers at Brave Software discovered a prompt injection vulnerability in Perplexity's Comet AI browser.
  • The flaw allowed hidden commands in web content to extract account details and request one-time passwords.
  • The vulnerability was reported to Perplexity on July 1, 2025, and publicly disclosed by Brave on August 20, 2025.
  • Perplexity claimed the issue was patched before being noticed and that no user data was compromised.
  • Brave reported that subsequent testing after disclosure indicated the vulnerability was not fully fixed.

Connected Companies & Entities

2 Entities mapped

“Perplexity's Comet AI browser was found to have a prompt injection vulnerability by Brave Software researchers....”

“Researchers at Brave Software discovered and publicly disclosed a prompt injection vulnerability in Perplexity's Comet browser....”

Primary Source Grounding & Direct Attribution
Direct Origin Attribution
Primary Reporting: Trending Topics•Published: Aug 26, 2025
Original Coverage Title: “AI-Browser Comet von Perplexity mit Sicherheitslücke”

Related Market Signals & Shifts

Recent verified developments and strategic activity across this market segment.

AI & Generative AIOct 8, 2026

Musk's Grok Bot to Use Rival AI Models Like Claude

Elon Musk announced that Grok Bot, an agent app from his AI unit (formerly xAI, now part of SpaceX and recently renamed SpaceXAI/SpaceXSI), will no longer rely solely on its own Grok models. Instead, it will pick 'the best back-end model for the respective task,' citing examples such as Anthropic's Claude Opus 5.5, Midjourney, and Suno. The announcement, first reported by The Information, follows user complaints about access issues. This strategic shift acknowledges that xAI's models don't lead in all areas—for instance, Claude Opus 5.5 outperforms competitors on the Artificial Analysis ranking. The move mirrors a broader industry trend of multi-model routing, as seen with Microsoft's Copilot and Perplexity, and comes despite reports of SpaceX planning $40 billion in debt for Nvidia chips.

Read assessment
Retail MediaOct 8, 2026

Walmart's AI assistant Sparky drives CX gains and sales growth

Walmart U.S. President and CEO David Guggina highlighted at the Goldman Sachs Global Consumer and Retail Conference how AI is reshaping Walmart's operations and customer experience. AI-driven efficiencies have led to faster delivery and cost savings, reinvested into competitive pricing and CX. The retailer's homegrown AI assistant Sparky, now central to its experience improvements, saw weekly engagement grow 60% quarter over quarter and visual search capabilities led to a 57% spike in conversion. Sparky also drives 40% higher average order values. Walmart also benefits from external AI agents like OpenAI's ChatGPT and Google's Gemini, which deep link to Walmart, resulting in high conversion rates. This contrasts with Amazon's blocking of such agents. Guggina hinted at integrating Sparky into other areas like Vizio TVs.

Read assessment
Search & AIOct 8, 2026

SEO/GEO expert Olga Dytynko discusses AI search optimization for affiliate marketing

This article is an expert interview with Olga Dytynko, Senior SEO Consultant at MAIGroup, discussing the impact of generative AI on search and the adaptation of SEO strategies for AI-driven search engines. She emphasizes the integration of SEO and GEO, focusing on content quality, brand entity clarity, and technical fundamentals. Key strategies include aligning content with business goals, optimizing for AI visibility through structured data and crawler control, and measuring AI visibility via brand mentions, citations, and recommendations. She highlights the growing importance of original data, genuine expertise (E-E-A-T), and building a strong, trustworthy brand presence, especially for affiliate companies, to remain visible as AI answers become more prevalent.

Read assessment

Track Real-Time Market Signals & Shifts

Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.