AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web page, and that page's JavaScript can reach a privileged local service on the same machine and spawn a...

AutoJack: How a single page can RCE the host running your AI agent

In this article 1. Why we are looking at agent frameworks 1. What is AutoGen Studio 2. The AutoJack chain at a glance 3. Anatomy of the chain 1. Issue 1: Origin allowlist that the agent itself defeats 2. Issue 2: Auth middleware that opts MCP out 3. Issue 3: serverparamsfrom the URL is the comman...

Malicious code in autogen_studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5c6d0ae37fec7bcb0a91fd8956a8f6f930e82986d6521df81349ee6a1644d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...