#devsecops
-
GitLab Patches Critical 9.9 AI Gateway Flaw Enabling Command Execution
A flaw rated 9.9 let a logged-in user with Duo Agent Platform access escape the prompt template sandbox and run arbitrary commands on the gateway. Only organizations that host their own AI Gateway need to act.
-
25 Minutes to Admin Access: How an AI Agent Found a Live Baseten GitHub Token
Strix was vetting the inference provider Baseten before entrusting it with the company's data — and its autonomous agent obtained a token with admin rights to key repositories in 25 minutes.