PulseAugur
EN
LIVE 19:43:14

Security firm finds admin GitHub token in Baseten AI inference service

By PulseAugur Editorial · [2 sources] ·

A security firm named Strix discovered a critical vulnerability in Baseten, a company valued at $13 billion that provides AI inference services. Strix's autonomous hacking agent, also named Strix, found an active GitHub personal access token with admin privileges to Baseten's internal repositories. This token was embedded in a Docker image from March 2023 and remained functional until July 2026. Baseten's security team responded quickly to confirm the issue and revoke the token. AI

IMPACT Exposes potential security risks for companies relying on third-party AI infrastructure providers.

RANK_REASON Security tool discovers vulnerability in a third-party service.

Read on Mastodon — fosstodon.org →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Security firm finds admin GitHub token in Baseten AI inference service

How we ranked this

Signal score
20 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security tool discovers vulnerability in a third-party service.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [2]

  1. Hacker News — AI stories ≥50 points TIER_1 English(EN) · bearsyankees ·

    We got admin access to Baseten's production GitHub in 25 minutes

  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    We got admin access to Baseten's production GitHub in 25 minutes https://www. strix.ai/blog/baseten-harbor-g ithub-pat-takeover # ai # github

    We got admin access to Baseten's production GitHub in 25 minutes https://www. strix.ai/blog/baseten-harbor-g ithub-pat-takeover # ai # github

    LINKS strix.ai/…/baseten-harbor-github-pat-take…

RELATED ENTITIES

RELATED TOPICS