Evidence · DiggingBeagle record
Prompt injection in Opera Neon: Rapid response through responsible disclosure
Affected-vendor response documenting its own reproduction and the production-fix/retest chronology. The reported success rate belongs to the vendor’s test setup and is not a population-level risk estimate.
- Published
- Oct 23, 2025
- Accessed
- Oct 1, 2026
- Publisher
- Opera
- Source role
- vendor statement
Evidence record
Affected-vendor response documenting its own reproduction and the production-fix/retest chronology. The reported success rate belongs to the vendor’s test setup and is not a population-level risk estimate.
Claim-level citations (1)
- supportsHidden HTML prompt injection caused a cross-origin data leak in Opera Neon: Opera said it validated the proof of concept but reproduced it with approximately a 10% success rate, assessed exploitation complexity as high, deployed a production fix and reported that the researchers subsequently confirmed their proof of concept no longer worked.
Case overview, Nature of the vulnerability, Impact evaluation and Opera's response and mitigation steps