A single malicious URL can hijack Comet AI browser, exfiltrating emails, calendar, and user memory via encoded payloads.