When a user asks Gemini to create a summary, the AI treats these hidden commands like real warnings and copies

Google Gemini for Workspace can be tricked into displaying a phishing message when asked to summarize an email.

However experts have warned this also opens up the Gmail accounts for so-called “prompt-injection” attacks - so if the incoming email message contains a hidden prompt for Gemini, it can be executed in the pane. According to security researcher Marco Figueroa, this is exactly what the email provider is now susceptible to.