ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim's organization. The vulnerability has been codenamed AgentForger by Zenity Labs. The issue has since been addressed by OpenAI as of June 8,

Fact: Zenity Labs disclosed a critical vulnerability, AgentForger, in OpenAI’s ChatGPT Workspace Agents that allowed a single crafted ChatGPT URL or phishing link to silently create, authorize, and deploy an autonomous rogue agent inside an organization, inheriting the victim’s identity and access to existing connectors.[1][2][4][6] OpenAI acknowledged the report and removed the vulnerable URL parameter within a few days, and there is currently no evidence of exploitation in the wild.[3][4][6] RealGround analysis: This is a high-severity case of AI agent abuse where legitimate agent-building workflows and previously authorized integrations were converted into a stealthy insider-like operator capable of data exfiltration, credential harvesting, and persistent task execution.[4][6][7] Organizations should harden agent creation flows, strictly audit agent permissions and schedules, and continuously red-team AI workspaces to detect similar URL-driven or CSRF-style abuses of agent builders and autonomous workflows.[6][7][10]