<p>Nature, Published online: 12 October 2026; doi:10.1038/d41586-026-02714-yAn ambiguous instruction caused the chatbot to send three e-mails from Ying Zhao’s connected account. The incident advanced Zhao’s project, but showed that chatbots need limits.</p>