SC World reported on 16 September 2025, citing Cybernews researchers, that Yellow.ai's customer-service chatbot, which it says is used by Sony, Domino's and Hyundai, had a reflected cross-site scripting flaw. A crafted prompt could make the chatbot return HTML carrying hidden code; when that conversation later reached a human support agent, the code could steal session cookies and lead to account takeover. No exploitation is reported. Yellow.ai disputes it: CX Today reports the company said the attack was conducted against an experimental demo widget on its corporate website, not an in-production system, and that its production environment has different security configurations.