Researchers have found a Google Calendar vulnerability in which a prompt injection into Gemini exposed private data.