Image to Prompt Injection with Google Bard

A prompt injection scenario that I, and others, have been wondering about in the past, is the potential risk associated with chatbots being able to analyze images.
Could this ability open up the way for Indirect Prompt Injection attacks?
Recently, Google added the ability to uploading and analyze images with Bard. And it turns out that it is indeed possible to add instructions to an image, and have the Bard follow those instructions.

attacks bard chatbots google google bard image images injection injection attacks prompt injection prompt injection attacks risk scenario