Microsoft warns web-enabled AI agents vulnerable to remote code execution via malicious webpages

According to Microsoft, web-enabled AI agents can be exploited for host-level remote code execution through malicious webpages and prompt injection attacks. Microsoft demonstrated the vulnerability in AutoGen Studio, where an agent rendering a malicious webpage could reach the host system, creating a new attack surface for organizations deploying web-capable agents.