Aug 18, 2025Unverified
Lenovo's Lena support chatbot tricked into serving XSS that steals support-agent session cookies
Rogue: Went past its access, Caused harmAI loose in the worldInjectionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
Cybernews researchers showed that a single ~400-character prompt could make Lena, Lenovo's GPT-4-powered support chatbot, emit attacker-controlled HTML that executed in the support platform — capturing active session cookies, including those of human support agents the conversation was escalated to. Lenovo acknowledged the XSS vulnerability and implemented corrective measures before August 18, 2025.
What this means for youAt home: a support chatbot can be manipulated into exposing the account sessions of the people who use it. At work: treat chatbot output as untrusted and filter it before it is shown to staff or customers. If you run a chatbot, check that its replies cannot run code in your support tools.
Sources
- CSO Onlinehttps://www.csoonline.com/article/4043005/lenovo-chatbot-breach-highlights-ai-security-blind-spots-in-customer-facing-systems.html
Incident records from the AI Agent Incident Database by sipi.bot (https://sipi.bot/incidents/), licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
Source data license: CC BY 4.0. Attribution to sipi.bot is required.
rogue:R3rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2328. It has not been edited since it was approved; the hash above would not match if it had. How to verify