AutoJack: a webpage can make an AI agent execute code

Colleagues, a cybersecurity alert: Microsoft described AutoJack — a local AI agent becoming a remote code-execution vector.

Summary:
- In AutoGen Studio pre-releases (0.4.3.dev1/dev2) the MCP WebSocket accepted unauthenticated commands.
- An agent loading an attacker page bypassed localhost checks and could run commands under the agent account.
- Microsoft patched main (commit b047730); PyPI lacks the fix yet.

Recommendations: verify you did not install pre-releases; switch to GitHub main after b047730, isolate agents (containers/VMs), use allowlists and least privilege.

Important: localhost must not be the sole barrier — authenticate control plane and restrict process execution.

How do you isolate AI agents and services?

#cybersecurity #AI #infosec