AutoJack hijacks AutoGen AI agent to deliver host RCE
Microsoft researchers disclosed AutoJack, an exploit chain where a single malicious web page abuses the AutoGen Studio browsing agent to cross the localhost trust boundary and spawn arbitrary processes on the host. The find shows AI agents that browse untrusted sites can become unchecked delivery channels, forcing a rethink of sandboxing and localhost assumptions.