Zenity Labs uncovers AgentForger, a ChatGPT flaw that forged a rogue insider agent from one link

A cross site request forgery bug in ChatGPT Agent Builder let a single tampered link plant an invisible, attacker controlled agent running under an employee identity and polling for commands every five minutes. OpenAI has patched it.