AgentForger vulnerability in OpenAI's Agent Builder allows rogue AI agents via tampered ChatGPT links
Zenity Labs discovered 'AgentForger,' a vulnerability in OpenAI's Agent Builder that allowed a single manipulated ChatGPT link to create an autonomous agent on an employee's behalf. The rogue agent could inherit the victim's identity and access rights, bypass approval requirements, and retrieve new instructions from an attacker's inbox every five minutes.
Why it matters: This vulnerability could enable attackers to deploy persistent, autonomous AI agents within an organization, bypassing security controls and posing a significant insider threat.
Full story at: The Decoder ↗