AutoJack Weaponizes Local AI Agents Into Code Execution Vectors

AutoJack exploits a critical vulnerability in AutoGen Studio's MCP WebSocket to turn local AI browsing agents into code execution conduits. Attackers can execute arbitrary commands on a developer's host system simply by serving a malicious web page to the agent—no credentials, authentication, or additional interaction required. This exploit chain reveals a concerning new attack surface in AI development frameworks, where untrusted web content can compromise the underlying system's integrity.