PleaseFix: Zero-Click Agent Hijack in Perplexity Comet

Zenity Labs disclosed two attack chains: silent local file system exfiltration while the agent returns expected results, and credential theft from 1Password via agent-authorized workflow abuse. Both trigger without user interaction through attacker-controlled content in routine workflows like calendar invites. Perplexity patched the browser-side execution prior to disclosure. Source