Researchers Gained Admin Access to Baseten's Production GitHub in 25 Minutes via PAT Takeover
bearsyankees · hn · 2026-09-16
Security firm Strix published a writeup showing how they took over Baseten's production GitHub in just 25 minutes by abusing an over-scoped GitHub Personal Access Token (PAT).
The post walks through the full attack chain: how over-privileged PATs leak, how the token enabled lateral movement into production, and why long-lived credentials in CI/CD pipelines remain a systemic risk for AI infrastructure companies.
A useful cautionary case for any team wiring GitHub tokens into deployment pipelines.
More from Infra
- To dethrone Postgres, new databases must prioritize ecosystem integrations from day one — mgill25 · 2026-11-02
- ESP32-powered 4-inch touchscreen builds a TUI dashboard for monitoring a DGX inference cluster — CATLLM · 2026-11-02
- OpenRouter crosses 10 quadrillion annualized token run rate, doubling every 10.5 weeks — deedydas · 2026-11-02
- Palmer Luckey asks: can you use datacenter RAM for things prohibited by the operator's terms of service? — avaitopiper · 2026-11-02
- Disable MTP for 20-30% faster local LLM inference on limited RAM — InternalMode8159 · 2026-11-02
- Kioxia up 216% in a year but down 68% from its June 2026 peak — zephyr_z9 · 2026-11-02