AutoJack: Suspicious child process spawned from AutoGen Studio MCP server

Ibrahim Saud@tektrix

•updated Jun 28, 2026•3•0•8

Detects shell or interpreter processes spawned as children of 'autogenstudio', potentially indicating command injection via WebSocket or other application-level vulnerabilities (e.g., CWE-78).