Back to article
Microsoft Security Blog

AutoJack: How a single page can RCE the host running your AI agent (opens in new tab)

Covered by 9 sources See all sources covering this story including BleepingComputer, This Week In 4n6Discussed on Hacker News

Covered in 10 articles

BleepingComputer·

Microsoft fixes AutoGen Studio flaw that enabled code execution

Discussed on Hacker News
Feeds
This Week In 4n6·

Week 25 – 2026

Feeds
The Hacker News·

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Feeds
TechRadar
·

Microsoft warns AI agents are being 'AutoJack'-ed to deliver RCE payloads by browsing untrusted websites

Feeds
Malware Analysis, News and Indicators·

22nd June – Threat Intelligence Report

Feeds
Malware Analysis, News and Indicators·

AutoJack: How a single page can RCE the host running your AI agent

Feeds
CSO Online·

Microsoft says web-enabled AI agents can trigger host-level RCE

Feeds
news.risky.biz·

Risky Bulletin: Klue breach impacts security firms

Feeds
Check Point Research·

22nd June – Threat Intelligence Report

Feeds

In other languages

CISO Advisor·

Microsoft corrige falha no AutoGen Studio

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help