A prompt injection vulnerability paired with other flaws can turn a Google search into a full attack chain that could threaten enterprise networks.