AutoJack AI Agent Exploit Unveiled

AutoGen Studio's 'AutoJack' vulnerability allows a local AI agent visiting a malicious webpage to open a trusted localhost WebSocket, bypass origin and authentication checks, and execute base64-encoded commands on the developer's machine, enabling silent remote code execution; maintainers patched the flaw and researchers recommend strong authentication, input validation, and environment isolation.