Indirect prompt injection in GitLab Duo exposed private source code and inserted malicious HTML into AI responses, risking ...

Researchers managed to trick GitLab’s AI-powered coding assistant to display malicious content to users and leak private source code by injecting hidden prompts in code comments, commit messages and ...