We got admin access to Baseten's production GitHub in 25 minutes
9 hours ago
- Baseten's public Harbor registry exposed a container image containing a live GitHub personal access token with admin/push access to critical repos.
- Strix, an autonomous hacking agent, discovered the token in about 25 minutes without credentials by pulling and inspecting the image's build history.
- The token from a March 2023 build had admin access to Baseten's main product, GitOps (Flux), and Homebrew tap repos, as well as read/write to customer-specific repos.
- Baseten's security team responded quickly, making the registry private and rotating the token within a day.
- The leak occurred because a build argument passed the token, which Docker recorded in the image's metadata even after the layer cleanup.
- Recommendations include using BuildKit secret mounts, regularly scanning image history, limiting token permissions, and adding expiry dates to build tokens.