Securing Perplexity’s AI Browser from a One-Click UXSS

Trail of Bits used TRAIL threat modeling and adversarial testing to demonstrate four prompt injection techniques against Perplexity's Comet AI that could exfiltrate private Gmail data.

CVE-2017-5124 is a Universal Cross-site Scripting (UXSS) flaw in Chromium's MHTML handling affecting version 62 and below, letting attackers bypass browser security and read cookies across open tabs.

A critical ChatGPT Atlas Browser vulnerability: XSS on an OpenAI subdomain let attackers hijack tabs, leak browsing URLs, and steal OAuth tokens.

XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.

A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.

Bugcrowd's Savant Forge combines fuzz testing with symbolic execution to surface real exploitable vulnerabilities in CI/CD pipelines, while Savant Runtime tracks live third-party components in production to support SBOM compliance.