Lethal Trifecta – Using Notion AI's Web Search Tool to Leak Private Notion Pages(codeintegrity.ai)
codeintegrity.ai
Lethal Trifecta – Using Notion AI's Web Search Tool to Leak Private Notion Pages
https://www.codeintegrity.ai/blog/notion
2 コメント
Under discussion here: https://news.ycombinator.com/item?id=45307095
Hey HN — yesterday Notion released AI agent support on their platform with support for MCP servers and custom AI agents. It didn’t take us long to find an example of a lethal trifecta attack in which, through indirect prompt injection, we were able to get Notion AI to leak data via its web search tool.