Microsoft fixes AutoGen Studio flaw that enabled code execution
Source Bleeping Computer
Rated by Threat Radar
Data as of 23 Jun 2026, 17:15 UTC
What to do
AI-suggested
Microsoft has remediated the issue before any official release, so users installing AutoGen Studio from PyPI are not affected. Developers who built AutoGen Studio from GitHub during the vulnerable window should update to the fixed commit (b047730 or later). Microsoft recommends running AutoGen Studio strictly as a developer prototype in isolated environments, not exposing it to the internet, and running it under low-privilege accounts within sandboxed user profiles or containers to contain any potential future agent-driven code execution.
Description
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system simply by visiting a malicious webpage. [...]