AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

AutoJack: unauthenticated MCP WebSocket in AutoGen Studio (0.4.3.dev) lets web pages hijack AI agents and run code on localhost. Isolate agents in containers, authenticate control planes, and enforce execution allowlists when agents browse untrusted content.