Strix Discovers Critical GitHub Token Exposure at Baseten

• •Strix found a live GitHub token with admin rights in Baseten's infrastructure.
• •The token had been active for over three years, granting access to sensitive repositories.
• •Baseten's security team responded quickly, rotating the token within a day.

Security startup Strix identified a critical vulnerability in Baseten's infrastructure, discovering a live GitHub personal access token with repository-level admin rights within 25 minutes. The token, associated with the 'basetenbot' account, had been active since March 2023 and provided access to several private repositories, including customer-specific ones. Strix performed this scan as part of their due diligence before using Baseten's services. Upon discovery, Baseten's security team promptly confirmed the issue, locked down the affected project, and rotated the token within a day. This incident highlights the potential vulnerabilities in cloud infrastructure providers, particularly in the AI neocloud sector. Strix's autonomous hacking agent, Strix, utilized reconnaissance techniques to uncover the token through a public Harbor container registry associated with Baseten. The incident raises concerns about the security practices of neocloud providers, emphasizing the need for thorough vendor assessments.