Google Cloud Vertex AI - Data Exfiltration Vulnerability Fixed in Generative AI Studio

Large Language Model (LLM) applications and chatbots are quite commonly vulnerable to data exfiltration. In particular data exfiltration via Image Markdown Injection is frequent.
This post describes how Google Cloud’s Vertex AI - Generative AI Studio had this vulnerability that I responsibly disclosed and Google fixed.
A big shout out to the Google Security team upfront, it took 22 minutes from report submission to receiving a confirmation from Google that this is a security issue that will be fixed.

applications chatbots cloud data data exfiltration exfiltration generative generative ai google google cloud image injection language large large language model llm studio vertex vertex ai vulnerability vulnerable