Dialogflow CX 'Rogue Agent' bug allowed AI conversation hijacking

The vulnerability, discovered by Varonis, could allow attackers to silently manipulate Dialogflow CX conversations, exfiltrate data, and compromise all agents in the same Google Cloud project. Google addressed the flaw in late 2025 after Varonis reported it.