Perplexity's Comet AI browser may have some concerning security flaws which could let hacker hijack your device

Abstract image of cyber security in action.

• SquareX discovered hidden MCP API in Comet browser enabling arbitrary local command execution
• Vulnerability in Agentic extension could let attackers hijack devices via compromised perplexity.ai site
• Demo showed WannaCry execution; researchers warn catastrophic third‑party risk is inevitable

Cybersecurity experts at SquareX claims to have found a major vulnerability in Comet, the AI browser built by Perplexity, which could let threat actors take over the victim’s device, entirely.