GoKawiilStrix agent found admin-level GitHub token exposed on Baseten infrastructure
Security firm Strix ran an unauthenticated scan against Baseten's public infrastructure and within 25 minutes uncovered a live GitHub personal access token with admin rights to Baseten's core product repo, GitOps repo, and Homebrew tap. The token, tied to a container image built in March 2023, had gone unnoticed for over three years and still granted read/write access to private customer repositories when discovered in July 2026. Baseten's security team confirmed the issue as critical and rotated the token within a day of disclosure.
GoKawiil's interpretation of the reporting above, not reported fact.
Baseten is valued at $13 billion and many companies rely on it for AI infrastructure, so a long-lived admin credential exposed on a forgotten subdomain represented a serious supply-chain risk to its customers' code and data. The episode shows how automated, credential-less scanning can surface critical secrets that manual audits miss, and underscores why vetting vendors' security posture before integration matters, especially for AI infrastructure providers handling sensitive models and customer repos.
- Strix, an autonomous hacking agent, discovered a live admin GitHub token on Baseten's public infrastructure without any credentials or source code access.
- The exposed token dated back to March 2023 and still granted admin access to core repos and customer repositories in July 2026.
- Baseten's security team responded quickly, confirming the issue as critical and rotating the token within about a day.
Source: strix.ai, 2026-09-15
Published there as: “We got admin access to Baseten's production GitHub in 25 minutes”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.