ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
ChatGPT AgentForger CSRF flaw allows deploying rogue workspace agents via phishing links.
Zenity Labs disclosed a critical CSRF vulnerability in OpenAI's ChatGPT Workspace Agents (codenamed AgentForger) that could allow attackers to deploy malicious autonomous AI agents within victim organizations through a single phishing link. The flaw exploited URL parameter injection to automatically create and authorize agents with access to enterprise connectors like Outlook, Gmail, and Slack without user approval. OpenAI patched the vulnerability on June 8, 2026, and announced deprecation of Agent Builder in favor of the Agents SDK.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OpenAI?
Get an email when a new story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA critical Cross-Site Request Forgery (CSRF) vulnerability in OpenAI's ChatGPT Workspace Agents allowed attackers to deploy unauthorized autonomous AI agents within enterprise environments simply by tricking a user into clicking a phishing link. The flaw leveraged URL parameter injection to bypass user approval workflows, granting rogue agents access to sensitive enterprise connectors such as Outlook, Gmail, and Slack — all without the victim's explicit consent. This is particularly dangerous because AI agents can autonomously take actions at scale, meaning a single successful phishing click could result in mass data exfiltration, lateral movement, or manipulation of business communications. The incident highlights how rapidly expanding AI tooling introduces novel attack surfaces that traditional security controls are not yet designed to address.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.