Is AutoGLM safe?

Question

Is AutoGLM safe?

Accepted Answer

AutoGLM is high risk. AutoGLM's content script runs on every website you visit and listens for a WEBPAGE_TO_AUTOGLM_EXTENSION window message with no check on which site sent it. We confirmed this live: from an ordinary Wikipedia page with no relation to AutoGLM or its maker Zhipu AI, we posted a message carrying an attacker-chosen session ID, and the extension stored that ID and opened a live WebSocket to Zhipu AI's autoglm-api.zhipuai.cn remote-control endpoint using it — then kept the connection alive with repeated heartbeat pings. Because any open tab can trigger this, an attacker-controlled or compromised website can enroll your browser into an AutoGLM session it controls. The extension's own code shows that once a matching session exists on Zhipu's server, it can open and read tabs, take screenshots, click, type, and download files in your browser; we did not have a matching attacker-controlled server session available to confirm those specific follow-on actions in this test. When you use AutoGLM task features, the extension sends task telemetry to ByteDance's Volces analytics endpoint. The transmitted data includes user and session identifiers, task source, target domain, task duration, success or failure status, and URL or tab context derived from the active task.

Is AutoGLM safe?

Findings