One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes
Zenity Labs uncovered "AgentForger," a vulnerability in OpenAI's Agent Builder that let a single manipulated ChatGPT link create an autonomous agent on an employee's behalf. The agent inherited the victim's identity and access rights, bypassed approval requirements through the malicious prompt, and pulled new instructions from the attacker's inbox every five minutes. The article One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes appeared f
Record details
Published: 23 July 2026
Source: The Decoder
Category: News
Topics: Agents & autonomy
Retrieved: 25 July 2026
Related evidence
These records share source-supplied organisations, an exact publisher byline, automatic topics or regions. The reason is shown on every link; related does not mean supporting, agreeing with or verifying this record.
OpenAI wants developers to stop typing commands and start using a joystick to control their AI agents
The Decoder · 16 July 2026
OpenAI's Codex now encrypts instructions between AI agents, leaving developers blind to internal delegation
The Decoder · 15 July 2026
AI coding agents can modernize research software but can't judge if the science is right
The Decoder · 1 August 2026
Study contradicts Anthropic and OpenAI claims that autonomous AI research is within reach
The Decoder · 14 August 2026
OpenAI's attack agent did exactly what it was told - just more relentlessly than expected
ZDNet AI · 23 July 2026
Todd Blanche Can’t Admit The Slush Fund Was A Mistake Because ‘That’s Not Proper MAGA Talk’ — See Also
Above the Law (legal tech) · 23 July 2026
How to cite this record
ethics.ai (23 July 2026), “One tampered ChatGPT link could spawn a rogue AI agent that took orders from an attacker every five minutes,” evidence record 13392, https://ethics.ai/record/13392 (originally published by The Decoder).
Use and limitations
This page is a stable index and citation surface for a source record. ethics.ai did not author the underlying report and has not independently verified every claim. Automatic topics may be imperfect. For consequential use, quote and cite the original publisher.