AI Agent Found Admin Access to $13B Startup in 25 Minutes

Strix ran an autonomous AI pentest agent on *.baseten.co during a check of Baseten (valued at $13 billion). In 25 minutes, the agent found a live GitHub token basetenbot in a public Harbor registry, granting admin access to the main repository, GitOps repo flux-cd, and homebrew-tap. The token had been in Docker image build history since March 2023. Baseten revoked the token and closed access the same day.

• Token found in history[].created_by field of baseten/baseten-app image config
• Token gave admin and push to main repo, flux-cd, and homebrew-tap
• Leak existed since March 2023 in public Harbor registry
• Baseten revoked token and closed findings in 4 days