Root cause
Generated content and browser output restrictions did not maintain the intended boundary around connected Workspace data.
Demonstrated impact
The researchers demonstrated disclosure of email content from a controlled account.
Lessons for review
- Independently constrain external destinations for sensitive model output.
- Review connector data access and rendering as a single end-to-end trust boundary.
Award and evidence
USD 20,000Bug Bounty · Researcher Reported
Records the individual base award, not the article’s USD 50,000 aggregate. A USD 1,337 event bonus for this finding is stated separately.
Primary public source read; individual award and source provenance verified. No target testing or exploit reproduction performed.
- Award is reported by the cited source; cash settlement is not independently audited.
Recorded timeline
- Published
- 2024-03-04explicit
Sources and provenance
- We Hacked Google A.I. for $50,000 Roni Carta · reviewed 2026-10-02
Record reviewed 2026-10-02. Snapshot 53796974ace8. Open the complete JSON contract.