Google Patches Gemini Enterprise Vulnerability Exposing Corporate Data

Google has patched Gemini Enterprise after a zero-click vulnerability, dubbed GeminiJack, that security firm Noma Security described as an architectural weakness in how enterprise AI systems interpret information. The flaw could be exploited via specially crafted emails, calendar invites, or documents, with no user interaction required.

An attacker could instruct Gemini Enterprise to silently exfiltrate emails, calendar entries, or corporate documents, for example by embedding indirect prompt injection in a Google Doc and triggering it when a standard search is performed. Noma reported the issue to Google in May, and mitigations were rolled out in recent weeks; Google confirmed to SecurityWeek that the vulnerability has been mitigated.

Gemini Enterprise provides automation for large organisations’ workflows and has access to Google services such as Gmail, Docs, and Calendar, which the attack could leverage to reach sensitive data.