Threat
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Publication date not yet evaluated · Added thehackernews.com
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
It shows that AI browsing agents can be weaponized into a path for remote code execution on the host, turning a single malicious web page into a full system compromise vector.
Microsoft researchers detailed an exploit chain called AutoJack that hijacks an AI browsing agent to achieve host code execution. By steering the agent to load an attacker's web page, the page's JavaScript reaches a privileged local service and spawns a process on the host with no credentials or further user interaction.