TLDR Tech / InfoSec
Rogue Agent: How a Single Code Block Could Hijack Your AI Conversations in Google's DialogFlow
Rogue Agent is a Dialogflow CX flaw that lets anyone with dialogflow.playbooks.update rewrite a shared Cloud Run file and run arbitrary Python across all agents in a project, exfiltrating chat history and injecting phishing prompts through respond(). Attackers could bypass VPC Service Controls via unrestricted egress and query IMDS for service account tokens, so teams should review Dialogflow audit logs, failed requests, and Code Blocks for signs of tampering.
Read the full story