A vulnerability in Ramp's Sheets AI allowed the agent to insert formulas that made external network requests without user approval. This flaw created a significant risk of sensitive financial data exfiltration through indirect prompt injection.