It's hard to call any vulnerability "hidden" when it occurs in a tool that openly claims to be "AI".