Researchers found that OpenAI's browser, Atlas's omnibox, is extremely vulnerable to serious prompt injection attacks.