The vulnerability that turns your AI agent against you

Back Helpnetsecurity

The vulnerability that turns your AI agent against you

Helpnetsecurity • March 4, 2026

Share: View original

Researchers found critical agentic browser vulnerabilities in Perplexity Comet that let attackers hijack AI agents and steal credentials.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zenity Labs Reveals PleaseFix Vulnerabilities in Perplexity Comet and Other Browsers Zenity Labs disclosed a family of critical vulnerabilities known as PleaseFix, affecting agentic browsers including Perplexity Comet. These vulnerabilities enable zero-click agent hijacking, local file exfiltration, and credential theft within workflows authorized by agents such as 1Password. 18 sources 40

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1003 - OS Credential Dumping

Platforms (1)

Perplexity Comet