AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers disclosed “AutoJack,” an attack that steers AI browsing agents to attacker-controlled pages whose JavaScript abuses local privileged services (often on localhost) accessible from the agent’s browser context to spawn arbitrary processes and achieve remote code execution; the report outlines the attack flow, contributing architectural weaknesses (local host trust, relaxed CORS, elevated agent privileges), affected agent frameworks, and defensive mitigations for developers, organizations, and users.