Gemini Zero-Click Vulnerability Let Attackers Access Gmail, Calendar, and Docs

Cybersecuritynews •Guru Baran • December 10, 2025

A critical zero-click vulnerability dubbed “GeminiJack” in Google Gemini Enterprise and previously Vertex AI that let attackers steal sensitive corporate data from Gmail, Calendar, and Docs with minimal effort. According to Noma Labs, it was considered an architectural flaw rather than merely a bug. This flaw exploited how AI systems process shared content, allowing […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gemini Zero-Click Flaw Exposes Google Services to Attackers A zero-click vulnerability known as 'GeminiJack' was identified in Google Gemini Enterprise, allowing attackers to access sensitive data from Gmail, Calendar, and Google Docs. This architectural flaw exploited the way AI systems handle shared content, posing significant risks to corporate data security. 5 sources 29

Extracted Entities

Gemini Zero-Click Vulnerability Let Attackers Access Gmail, Calendar, and Docs

The full story

Extracted Entities

Attack Types (1)

Platforms (2)

Vulnerabilities (1)