Microsoft Warns AI Agents Are Being ‘AutoJacked’ To Deliver RCE Payloads By Browsing Untrusted Sites
Microsoft’s Defender Security Research Team Reveals “AutoJack”, a Chain of Vulnerability in AutoGen Studio That Enables RCE Via Malicious Websites The flaws included local host channel abuse, skipped login checks, and arbitrary code execution, which allowed agents to run attacker-delivered programs The issue only existed in early GitHub builds, fixed before release; highlights the need […]









