Vulnerability / research

Hidden webpage instructions exposed Opera Neon account data

Reported

What happened

Researchers demonstrated hidden webpage instructions that redirected Opera Neon's AI assistant into collecting account information and sending it to an external endpoint.

Parties and reporting

AI tools and systems: Opera Neon

Outcome

Opera deployed a fix on October 20; researchers confirmed their proof of concept stopped working.

Operating lesson

Keep page content untrusted and require explicit approval before an agent sends private information.

Evidence and limits

Controlled demonstration, not a reported malicious breach. Opera measured a 10% reproduction rate and required a particular page and user command.

Sources