Executive Summary
Zenity disclosed AgentForger, a critical ChatGPT Workspace Agents flaw that let one phishing link build, authorize and deploy an autonomous agent inside a victim's organization; OpenAI fixed it on June 8.
What Happened
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim's organization. The vulnerability has been codenamed AgentForger by Zenity Labs. The issue has since been addressed by OpenAI as of June 8,
Affected Products
- OpenAI ChatGPT Workspace Agents
Vulnerability / Attack Technique
Phishing link creating an authorized rogue agent
Technical Mechanism
A crafted link drove the victim's session to create and authorize an agent the attacker could control.
AI Security Category
LLM06:2025 Excessive Agency
Part of the AI Agent Excessive Agency topic.
Relevant Frameworks
RealGround Analysis
Agent creation is a privileged action that phishing can target. RealGround analysis: audit workspaces for agents nobody remembers creating.
Recommended Controls
- Review existing workspace agents
- Restrict agent creation to admins
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/chatgpt-agentforger-flaw-could-deploy.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.