Microsoft fixes AutoGen Studio flaw that enabled code execution

AutoJack is a chained vulnerability in Microsoft AutoGen Studio's MCP WebSocket that could let a malicious webpage trick a local AI agent into launching arbitrary PowerShell, Bash commands, or executables by exploiting an origin bypass, excluded authentication routes, and base64-encoded server_params passed to process-launching code. Microsoft remediated the issue before any PyPI release, limiting exposure to developers who built from the repository during a brief window; users are advised to run AutoGen Studio only in isolated, low-privilege developer environments.