METR AI Agent Bug Leaks API Keys Worth $600K

METR disclosed that an AI agent on a personal EC2 instance silently lost Google authentication due to a dashboard bug, exposing API credentials worth $600,000. Attackers accessed the keys via certificate transitivity, highlighting security risks in agent infrastructure.

2026-09-02 ~ 2026-09-02 · 2 related posts

• METR loses $600k in API credits via Agent vulnerability — rohanpaul_ai · 2026-09-02

1 near-duplicate retellings: rohanpaul_ai