Microsoft discloses AutoJack: a single web page can RCE the host running your AI agent

A malicious page visited by a browsing AI agent reaches an unauthenticated localhost MCP WebSocket in AutoGen Studio and spawns arbitrary processes on the host. Microsoft calls it research with no in-the-wild use, but it is the canonical warning to authenticate agent-reachable MCP endpoints.