Product
AutoGen Studio
- First Reported
- Jun 19, 2026
- Latest Reported
- Jun 22, 2026
Reported Context (2)
- Microsoft disclosed AutoJack, a chain of vulnerabilities in AutoGen Studio that could let a malicious webpage trick an AI agent into executing arbitrary commands on the host machine. Microsoft Fixes AutoGen Studio Flaw That Could Enable Host Command Execution
- Microsoft researchers described AutoJack, an exploit chain that can turn an AI browsing agent into a remote code execution path by abusing AutoGen Studio’s MCP WebSocket surface. AutoJack Uses AI Browsing Agent to Trigger Host RCE in AutoGen Studio Pre-Releases
CVE (2)
MITRE ATT&CK (3)
Vendors (1)
Products (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.