Microsoft Discloses 'AutoJack' RCE in AutoGen Studio: One Malicious Page Runs Code

On June 18, 2026, Microsoft disclosed "AutoJack," a chain of weaknesses that could let an AI browsing agent run arbitrary code on its host simply by opening a single malicious web page. Found in the development branch of its open-source UI "AutoGen Studio," the issue has already been fixed, and Microsoft says there are no reports of exploitation in the wild.