A critical vulnerability, ‘AgentForger,’ was discovered in OpenAI’s ChatGPT Workspace Agents, allowing a single phishing link to stealthily build, authorize, and deploy an autonomous AI agent within a victim’s organization. This flaw could have enabled attackers to establish persistent access and automate malicious tasks using the compromised agent. OpenAI has since addressed the issue as of June 8th.