Brave reports that concealed elements in page markup could instruct Opera Neon's assistant, when asked about a page, to pull data such as email addresses from the user's other logged-in sites. Reported via Bugcrowd on 2025-10-14 and initially closed as not applicable, Opera then deployed a fix on 2025-10-21 that Brave confirmed.
Why it matters
It adds a third agentic browser to the pattern of cross-site actions triggered by page content.
Key facts
As stated in the sources, with where to find them.
- Timeline: reported 2025-10-14; closed as not applicable 2025-10-17; fix deployed and confirmed 2025-10-21; Opera published details 2025-10-23.Disclosure timeline
Findings that cite this record
Key questions this bears on
- Can prompt injection against AI agents be reliably defended?Not reliably. Defenses reduce injection but none has eliminated it; limiting what untrusted input can trigger is the most defensible approach.
Sources
Related records
Oct 21, 2025
Aug 20, 2025
Nov 20, 2025
Oct 8, 2025
Aug 6, 2025
Jul 8, 2025