This popular AI agent could be hacked by a single email — with potentially disastrous consequences