- Zenity Labs found AgentForger, a flaw in OpenAI’s ChatGPT Agent Builder
- Malicious links could instantly deploy rogue agents that exfiltrate sensitive data without user prompts
- OpenAI patched the issue by removing the risky URL parameter; no abuse detected
AI agents are handy for answering customer emails, or tracking reports for newly released security vulnerabilities. But what if they go rogue and turn on the very enterprise they’re supposed to support?