{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/safebreach-gemini-calendar-invite-promptware-2025/",
 "asOf": "2026-09-26",
 "id": "safebreach-gemini-calendar-invite-promptware-2025",
 "date": "2025-08-06",
 "datePrecision": "day",
 "title": "SafeBreach shows Google Calendar invites can hijack Gemini for Workspace agents",
 "lane": "attack",
 "kind": "vulnerability-disclosure",
 "summary": "SafeBreach researchers showed that instructions in calendar invite titles or email subjects, retrieved when a user asked Gemini about their schedule, could trigger tool misuse such as deleting events, opening URLs, exfiltrating email subjects, and controlling connected smart-home devices. They disclosed to Google in February 2025, and Google deployed layered mitigations including confirmations, URL handling policies and injection classifiers.",
 "whyItMatters": "It extended assistant prompt injection from data leaks to actions on physical devices and apps.",
 "actors": [
  "safebreach",
  "tel-aviv-university",
  "technion",
  "google"
 ],
 "topics": [
  "prompt-injection",
  "tool-and-mcp-security"
 ],
 "atlas": [
  "untrusted-content",
  "tools",
  "human-approver"
 ],
 "artifacts": [
  "gemini"
 ],
 "sources": [
  {
   "url": "https://www.safebreach.com/blog/invitation-is-all-you-need-hacking-gemini/",
   "publisher": "SafeBreach",
   "title": "Invitation Is All You Need: Hacking Gemini",
   "date": "2025-08-06",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Affected surfaces: Gemini web, mobile app, and Android voice assistant with Workspace, Google Home and Zoom integrations.",
   "locator": "Affected products"
  },
  {
   "fact": "Disclosed to Google February 2025; Google's mitigation response by June 2025.",
   "locator": "Disclosure timeline"
  }
 ],
 "significance": 4,
 "fideQuestions": [
  "FID-076"
 ],
 "methods": [
  "agent-data-exfiltration",
  "human-approval",
  "injection-classifiers"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}