Forensics on FBI-flagged ARTEX pentest framework: deleted auth guard, backdoored Docker image
udmrzn · x · 2026-11-16
After the FBI Cyber Branch FLASH on the open-source LLM-driven autonomous pentest framework ARTEX (2026-11-13), Blackfish Security published an independent forensics package based on static analysis:
- Backdoored Docker image: tomicdd/artex on Docker Hub (8,817+ pulls) carries unauthenticated root RCE — a third captcha field absent upstream triggers sh -c <cmd> as root via POST /api/auth/login.
- Deleted safety boundary: guard.go, self-described as the "safety boundary layer," opens with a comment admitting the RoE authorization-scope mechanism was removed with no replacement — the one component checking whether a target is in scope was built then deliberately deleted.
More from coding & agent
- Claude Code's full system prompt leaked: 7,832 lines, 128 tools, 44 skills on GitHub — udmrzn · 2026-11-16
- Addy Osmani's Claude model picking guide: Opus 5.5 default, Fable 5.2 costs 2.8x more — udmrzn · 2026-11-16
- Dev floats an MCP mapped to physical addresses so agents could query residents and businesses — mobileraj · 2026-11-16
- GitHub's new Copilot app brings repos, PRs and issues together — 0xkarasy · 2026-11-16
- Building AI agents is the easy part — developers debate what blocks revenue — SufficientLab218 · 2026-11-16
- Three practical tips for getting more out of Fable 5.2, from permission-giving to orchestrating Opus 5.5 agents — dreamwieber · 2026-11-16