Incident database / 2025-08-06

Promptware: calendar-invite injection drove Gemini-connected smart-home actions

Indirect prompt injection via calendar invitesGemini 3 Pro Gemini 2.5 Flash

Researchers showed that poisoned calendar invites could hijack Gemini assistant sessions into performing unintended actions, including smart-home control, when the user later asked routine questions. Google shipped mitigations. Demonstrates the indirect-injection surface of assistant-integrated deployments.

Outcome. Mitigations deployed by Google following disclosure.

Sources

Sources (1)

SafeBreach 'Invitation Is All You Need' research
SafeBreach security research · reporting · source tier F · safebreach.com · retrieved 2026-08-03

How to cite thisCC BY 4.0 — reuse freely, attribution required

Plain

ModelRiskIndex. "Promptware: calendar-invite injection drove Gemini-connected smart-home actions." Incident database, 2025-08-06. https://modelriskindex.com/incidents/gemini-calendar-injection-2025

BibTeX

@misc{mri-2025-08-06,
  title  = {Promptware: calendar-invite injection drove Gemini-connected smart-home actions},
  author = {{ModelRiskIndex}},
  year   = {2025},
  note   = {Incident database, 2025-08-06},
  url    = {https://modelriskindex.com/incidents/gemini-calendar-injection-2025}
}

Please cite the dated entry rather than the site root. Every assessment here is a point-in-time judgment bound to evidence retrieved on a specific date — an undated citation asserts something the data does not.

All incidents