Techtimes Vulnerability in AI Research Tools Allows Manipulation via Reddit Comments
Article Content
- •A single Reddit comment can manipulate AI research tools like ChatGPT and Gemini.
- •The vulnerability affects 54 to 71 percent of user-generated content retrieved by these systems.
- •The attack method, WARP, requires only the ability to post on public forums.
A critical vulnerability has been identified in AI deep research systems, including OpenAI's ChatGPT Deep Research and Google's Gemini Deep Research. Researchers from Cornell Tech revealed that a single Reddit comment can manipulate the recommendations of these systems, affecting 54 to 71 percent of user-generated content. The attack, termed WARP (Web Agent Retrieval Poisoning), requires no access to the systems or specific user queries. Instead, attackers can exploit the systems by posting misleading content on public forums. This vulnerability allows for the potential spread of scams and misinformation to thousands of users. The research paper detailing these findings was published in May 2026, with further analysis released on June 22, 2026. The attack method is particularly concerning due to the reliance of these AI systems on community-generated content for their outputs.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…