data exfiltration AI chatbot vulnerability