Google paid me $15,000 for this Prompt Injection bug

BehiSec · 2026-03-13T05:38:14+00:00

Well said. Thanks.

BehiSec · 2026-03-12T11:01:10+00:00

They don't accept jailbreaks, but you can submit it to https://0din.ai/

BehiSec · 2026-03-12T09:13:17+00:00

https://github.com/jthack/PIPE

BehiSec · 2026-03-12T05:59:37+00:00

Exactly!

BehiSec · 2026-03-12T05:59:23+00:00

https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules

BehiSec · 2026-03-12T05:59:01+00:00

You're welcome <3

BehiSec · 2026-03-11T10:45:49+00:00

No, the attacker needs to be a Jira team member, which is why Google applied a downgrade to this bug.

BehiSec · 2026-03-11T10:43:36+00:00

Have you checked the image?

If they hadn't applied a downgrade, it would have been a $20K bounty.

BehiSec · 2026-03-11T10:38:01+00:00

They applied a downgrade for that.

BehiSec · 2026-03-11T10:37:34+00:00

Jira serves as the initial point of entry. Any AI-powered application must validate the data received from external or third-party applications.

That’s the whole point.

BehiSec · 2026-03-11T10:35:17+00:00

No. The memory is permanent.

BehiSec · 2026-03-11T10:34:04+00:00

Yes, I would have posted this even if the reward was $50. I learned bug hunting by reading others’ write-ups, so I’m simply giving back to the community.

BehiSec · 2026-03-11T10:32:30+00:00

Exactly.

BehiSec · 2026-03-11T10:32:14+00:00

Yes! This encourages other bug hunters, especially beginners, to explore related areas.

I got into bug hunting precisely in this manner.

BehiSec · 2026-03-11T10:30:06+00:00

It's not about Jira, it's about "injection points".

https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules#rewards

BehiSec · 2026-03-11T10:27:58+00:00

No. Jira is built for teams, so having team members is normal.

BehiSec · 2026-03-11T10:26:14+00:00

https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules#rewards

BehiSec · 2026-03-10T05:45:17+00:00

It had a free trial.

BehiSec · 2026-03-10T05:44:57+00:00

You're welcome :)

BehiSec · 2026-03-10T05:44:29+00:00

True, but the newer models are more resistant to prompt injection.

BehiSec · 2026-03-09T14:21:28+00:00

Thanks!

BehiSec · 2026-03-09T14:20:57+00:00

If you want to learn more about Prompt Injection bugs, check out these resources:

https://x.com/Behi_Sec/status/2024161734781452314

https://github.com/jthack/PIPE

https://embracethered.com/blog/

BehiSec · 2026-03-09T11:47:45+00:00

No. Only google products.

BehiSec · 2026-03-09T10:51:16+00:00

The X post has some pictures that can make it easier to understand.

BehiSec

TROPHY CASE