Google Fixes GeminiJack Zero-Click Vulnerability in Gemini Enterprise

Google Fixes GeminiJack Zero-Click Vulnerability in Gemini Enterprise

First seen 11 Dec 2025, 21:51 UTC HackreadSecurityaffairs.Co 29.2

Article Content

Browse articles
ThreatCluster

Google addressed a critical zero-click vulnerability in its Gemini Enterprise systems, known as GeminiJack. This flaw allowed attackers to potentially access sensitive data from Gmail, Docs, and Calendar through crafted emails, invites, or documents. The issue was highlighted by Noma Security, indicating a significant risk to corporate data security.