6 ms·
Lethal Trifecta – Using Notion AI's Web Search Tool to Leak Private Notion Pages
- coderinsan 1y agoHey HN — yesterday Notion released AI agent support on their platform with support for MCP servers and custom AI agents. It didn’t take us long to find an example of a lethal trifecta attack in which, through indirect prompt injection, we were able to get Notion AI to leak data via its web search tool.
- simonw 1y agoUnder discussion here: https://news.ycombinator.com/item?id=45307095 https://news.ycombinator.com/item?id=45307095