AutoJack Attack: How One Web Page Can Hijack AI Agents for Remote Code Execution
AutoJack turns an AI agent's web browsing into host code execution: page JavaScript pivots through an unauthenticated localhost MCP route in AutoGen Studio dev builds. Under 2 seconds, no credentials. Defenses inside.