cd /news/ai-safety/one-tampered-chatgpt-link-could-spaw… · home topics ai-safety article
[ARTICLE · art-70583] src=the-decoder.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes

Zenity Labs uncovered 'AgentForger,' a vulnerability in OpenAI's Agent Builder that allowed a single manipulated ChatGPT link to create an autonomous agent on an employee's behalf, inheriting the victim's identity and access rights, bypassing approval requirements, and pulling new instructions from the attacker's inbox every five minutes.

read1 min views1 publishedJul 23, 2026

Zenity Labs uncovered "AgentForger," a vulnerability in OpenAI's Agent Builder that let a single manipulated ChatGPT link create an autonomous agent on an employee's behalf. The agent inherited the victim's identity and access rights, bypassed approval requirements through the malicious prompt, and pulled new instructions from the attacker's inbox every five minutes.

The article One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes appeared first on The Decoder.

── more in #ai-safety 4 stories · sorted by recency
── more on @zenity labs 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/one-tampered-chatgpt…] indexed:0 read:1min 2026-07-23 ·