Agent Hijacking

Agent hijacking is the takeover of an active AI agent session by an attacker, allowing them to redirect the agent's actions, extract its credentials, or use it as a proxy to access protected systems. It can occur through session token theft, MCP transport interception, or exploitation of insufficient authentication in the agent's control interface.