Analysis
Breaking down ‘EchoLeak’
First reported · Discovered catonetworks.com
Page published
Earliest dated coverage: 6 Oct 2026 · First observed: 12 Nov 2026 · Latest dated coverage: 6 Oct 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
The lethal trifecta gives defenders a practical framework for identifying dangerous combinations of agent permissions and understanding where information-flow controls are needed beyond sandboxing.
Cosmonic's guide explains the “lethal trifecta”: an AI agent combining private-data access, untrusted content, and an outbound channel in one context. Using EchoLeak (CVE-2025-32711) as an example, the guide describes how indirect prompt injection redirects authorized access into data exfiltration and why sandboxing alone cannot prevent leaks through permitted channels.