AutoJack MCP WebSocket Origin Bypass with Subsequent Process Execution

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•1

Detects unauthorized inbound WebSocket connections from external (non-private) IP addresses to the AutoGen Studio MCP API endpoint at /api/mcp/ws/ on port 8081, followed by the execution of interpreter processes (autogenstudio, uvicorn, or python) on the same host, indicating a potential exploitation of an origin validation bypass for remote code execution.