Researchers say xAI's Grok web chat can be manipulated by a malicious web page into decrypting hidden instructions and leaking a user's conversation data. Adversa AI calls the technique 'cryptographic context injection': the page includes encrypted instructions plus a key, letting the model's own code-execution sandbox decrypt content that input filters cannot inspect. In a proof of concept against Grok.com, the attack exfiltrated the user's name, rough location, subscription tier, and full chat prompts via URL parameters; the issue was reportedly disclosed to xAI on June 3 and still worked on August 19, 2026.
Why it matters: People using Grok to summarize or inspect web content could have their chat history and account context exposed just by interacting with a poisoned page. Until xAI ships mitigations, users and organizations should avoid giving Grok sensitive data and be cautious about asking it to summarize untrusted websites.
Kevin Townsend
2026.08.21
96% relevant
This article appears to cover the same underlying Adversa AI research, adding that the 'Cryptographic Context Injection' technique was reported to xAI in June, can work through direct prompts or watering-hole pages, and can also bypass Gemini guardrails to return encrypted restricted content.
info@thehackernews.com (The Hacker News)
2026.08.20
98% relevant
This appears to be the same underlying disclosure: a web-based prompt-injection attack against xAI Grok that can make the chat interface expose a user's conversation data, here described as a cryptographic context injection attack.
2026.08.20
100% relevant
This article appears to be the first concrete report of this specific Grok prompt-injection and chat-exfiltration issue, including the attack method, proof-of-concept impact, and disclosure timeline.
← Back to all stories