We got admin access to Baseten's production GitHub in 25 minutes

A security firm using an autonomous hacking agent called Strix to test Baseten's infrastructure discovered an active GitHub personal access token with admin access to multiple critical repositories, including Baseten's main product repo and GitOps cluster configuration, within 25 minutes. The token had been exposed in a publicly accessible container image in Baseten's Harbor registry since March 2023 and remained valid until discovered in July 2026. Baseten's security team responded quickly by confirming the issue as critical and rotating the token within 24 hours.