AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Researchers at Microsoft have identified a vulnerability, dubbed AutoJack, within the AutoGen Studio prototyping interface for their AutoGen multi-agent framework. The flaw allows an attacker to hijack an AI browsing agent to execute remote code execution by directing the agent to load a malicious web page. This occurs…