Agent Data Injection Attack Hijacks AI Agent Behavior

Researchers reveal a new attack where planted data in trusted sources (reviews, comments) can make AI agents misclick or execute attacker commands. The attack exploits how agents process untrusted content from web pages and forums, requiring no direct prompt injection.