Gemini Voice Assistant Hijacked via Messaging Notifications
Google Gemini voice assistant vulnerable to hijacking via messaging notification prompt injections.
SafeBreach researchers discovered a critical vulnerability in Google's Gemini voice assistant that allowed attackers to inject malicious commands through messaging notifications from apps like WhatsApp, Slack, and SMS. The attack, termed Fake Context Alignment, could enable threat actors to control smart home devices, initiate video calls, craft spoofed messages, and establish persistent control over the assistant. Google patched the vulnerability in mid-November 2025 after disclosure in August 2025.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGoogle's Gemini voice assistant contained a critical vulnerability that allowed attackers to inject malicious commands through messaging app notifications, enabling control of smart home devices and persistent access. The 'Fake Context Alignment' attack exploited how the assistant processed notification content, treating external messages as legitimate system commands. This demonstrates how AI-powered systems can be manipulated through unexpected input vectors, potentially giving attackers broad access to connected devices and personal data. Organizations must recognize that voice assistants and AI systems require the same rigorous security testing as traditional applications.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.