Comet AI Browser Drama: SquareX’s Vulnerability Claim Sparks Security Showdown!
SquareX claims it found a potentially critical vulnerability in Perplexity’s Comet AI browser. The firm suggests that the Model Context Protocol API could be exploited, but Perplexity isn’t buying it. They say the scenario is as unrealistic as a cat doing taxes. Meanwhile, SquareX insists their findings highlight the risk.

Hot Take:
Perplexity’s Comet AI browser vulnerability saga is like a soap opera, featuring a showdown between SquareX, the cybersecurity detectives, and Perplexity, the unyielding browser magnate. SquareX accuses Perplexity of harboring a security risk akin to a Trojan horse, while Perplexity waves it off as an overblown prank. Could this be a case of “It’s not me, it’s you”? Or perhaps, “Nobody puts Comet in a corner”? Grab your popcorn, as the drama unfolds!
Key Points:
- SquareX claims to have found a critical vulnerability in Perplexity’s Comet AI browser.
- Perplexity disputes the findings, labeling it as “fake security research.”
- The alleged vulnerability involves hidden extensions and a limited API protocol.
- SquareX demonstrated a potential exploit but acknowledged the need for significant user intervention.
- Perplexity has implemented precautionary measures, albeit dismissing the threat’s validity.
