TL;DR what: AutoJack chains three weaknesses in AutoGen Studio's MCP WebSocket so an attacker web page, loaded by a local AI browsing agent, runs arbitrary commands on the host. impact: Any page the agent opens can spawn a process under the account running AutoGen Studio with no credentials and ...
Source: [Dev.to](https://dev.to/etairos/autojack-one-web-page-turns-a-local-ai-agent-into-host-code-execution-1jph)