A patched Google Dialogflow CX flaw shows why enterprise AI chatbots need stronger access controls, logging, and runtime isolation.
One compromised agent could take over every other agent in that project ...