Strix autonomous agent gains Baseten production GitHub admin access in 25 minutes
September 15, 2026
An autonomous hacking agent named Strix successfully extracted a live GitHub personal access token with repository-level admin rights from Baseten. The token provided push access to core product repositories, GitOps clusters, and Homebrew taps without requiring prior credentials or source code.
HOW THIS AFFECTS YOU
●
builderYou must audit your third-party infrastructure security against autonomous agent-driven attacks.
●
policyThis demonstrates how autonomous agents can bypass traditional perimeter security to access sensitive IP.