AgentForger vulnerability allows unauthorized ChatGPT Workspace Agent deployment via phishing

A newly identified vulnerability, AgentForger, enables attackers to deploy rogue ChatGPT Workspace Agents through a single phishing link. The exploit allows for the unauthorized attachment of connectors, suppression of approval prompts, and persistent command execution via mailbox integration, posing a significant risk to organizational data security.