Weaponized Invite Enabled Calendar Data Theft via Google Gemini

A vulnerability in Google’s AI assistant Gemini allowed attackers to leak a victim’s private meetings via Google Calendar events, according to SecurityWeek’s report. The attack involved creating a malicious calendar event and sending an invite to the targeted user, with a payload in the Calendar description that bypassed privacy controls to access meeting data and create deceptive events without user interaction.

The exploit relied on Gemini’s integration with Calendar, which parses all event data, including titles, times, attendees and descriptions, enabling an attacker who can influence event fields to plant instructions for the model. The payload was triggered when the user asked Gemini a question about their schedule, resulting in a new calendar event containing the victim’s data in its description, accessible to the attacker.

The cybersecurity firm Miggo notes that the attack was successful because seemingly innocuous instructions can be semantically harmful when executed with the model’s permissions, and Google confirmed the vulnerability and addressed it.