AutoJack RCE - AutoGen Studio Spawning Shell with OS Commands

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•0

Detects instances where the AutoGen Studio AI agent process (python.exe or pythonw.exe) executes shell interpreters like cmd.exe or powershell.exe, typically indicative of Remote Code Execution (RCE) attempts resulting from MCP WebSocket prompt injection or similar vulnerabilities.