OpenAI has recently stated in an official blog that AI agents designed to operate web browsers may always be vulnerable to a specific type of attack known as "prompt injection", framing it as a persistent security challenge similar to online scams.