OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

Researchers at Zenity Labs discovered AgentForger, a critical vulnerability in OpenAI's ChatGPT Workspace Agents that exploits CSRF (cross-site request forgery, where an attacker tricks a user's browser into performing unwanted actions). An attacker could trick an employee into clicking a malicious link that secretly creates a powerful, invisible AI agent under the attacker's remote control, giving the attacker access to the employee's data and connected apps like Gmail or Outlook. Once created, the attacker can send email commands prefixed with 'TASK' that the hidden agent automatically executes and reports back on.