Microsoft's plan to fix the web with AI has hit a security flaw