Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.
Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft
Summary + source link. No paywalls, no tracking.