NewsThe Register — Security2026-07-23 13:02 UTC

One ChatGPT link could smuggle a rogue AI agent into your company

Teaser from the source

Researchers say OpenAI flaw let phishing bait create an autonomous corporate mole armed with employee access

This is the RSS-feed teaser. Read the full article at the original source.

Read at The Register — Security →

Other advisories

osv:CVE-2026-15628none
zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
osv:MAL-2026-7556none
Malicious code in chatgptproxytmp (RubyGems)
osv:CVE-2026-14714none
zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authentication
osv:CVE-2026-10214none
zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection
osv:CVE-2026-7644none
ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
CVE-2026-7644medium
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulatio…
osv:CVE-2026-7643none
ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy
CVE-2026-7643medium
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing …

Other news entries

Source: https://www.theregister.com/security/2026/07/23/one-chatgpt-link-could-smuggle-a-rogue-ai-agent-into-your-company/5275116