The viral AI agent tool had a critical security flaw that let attackers silently seize full administrative control.