AutoJack MCP WebSocket RCE - Shell Spawned by AutoGen Studio Agent Process

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•2

Detects suspicious child processes spawned by an AutoGen Studio agent process. This behavior is indicative of the AutoJack exploit chain, where an attacker leverages an unauthenticated MCP WebSocket endpoint (/api/mcp/ws/) to execute arbitrary OS commands on the host by passing base64-encoded StdioServerParams.