JustLog3 Cloud's AI assistant reads logs and repositories, creating a prompt-injection vulnerability where crafted log entries can manipulate model outputs. Red-team testing found two exploitable attack vectors: links that exfiltrate data from logs, and web search results that poison the assistant's memory with malicious instructions. Fixes include sanitizing URLs against workspace data and blocking memory saves from external sources.