This attack was demonstrated a couple years ago, it's not really a new thing.

https://simonwillison.net/2023/Oct/14/multi-modal-prompt-inj...

The problem is that this was a vulnerability in Notion without any mitigations or safeguards against it.