Dialogflow CX 'Rogue Agent' flaw enabled AI chatbot data theft

The vulnerability could allow attackers to silently manipulate AI conversations, exfiltrate data, and compromise all agents in the same Google Cloud project. Google has addressed the flaw after Varonis reported it in late 2025.