Cybersecurity researchers discovered a critical cross-site request forgery vulnerability, dubbed AgentForger, in OpenAI’s ChatGPT Workspace Agents that allowed attackers to deploy rogue autonomous AI agents within an organization via a phishing link. By exploiting URL parameters, the flaw enabled an attacker to create and activate an AI agent with employee-level access and disabled approval prompts, granting persistent access to sensitive workspace data and allowing the agent to impersonate users and send phishing messages. OpenAI patched the vulnerability on June 8, 2026, after responsible disclosure.
https://thehackernews.com/2026/07/chatgpt-agentforger-flaw-could-deploy.html