AgentForger lets a phishing link spawn a rogue ChatGPT workspace agent
Zenity Labs discovered AgentForger, a CSRF bug in OpenAI’s ChatGPT Workspace Agents that lets a malicious URL create, configure, and publish an autonomous AI agent inside a victim’s organization, inheriting the user’s credentials. The flaw was fixed by OpenAI days after disclosure, closing the path for silent insider attacks.