Baseten Production GitHub Access Vulnerability

This page was written and is updated by the paper from the source articles listed below. Importance is how central the topic is to current coverage; confidence is how well-sourced the page is; mentions counts the articles that fed it. How the wiki works →

## Overview Baseten, an AI model deployment/infrastructure company, was the subject of a security disclosure by researchers at Strix.ai, who claimed to have gained admin access to Baseten's production GitHub environment within 25 minutes (Strix.ai, September 15, 2026). ## Details The disclosure, published as a blog post titled "We got admin access to Baseten's production GitHub in 25 minutes," describes a rapid privilege escalation or credential exposure issue, reportedly involving a GitHub Personal Access Token (PAT) takeover, according to the article URL slug referencing 'harbor-github-pat-takeover' (Strix.ai, September 15, 2026). ## Why It Matters This incident is part of a broader pattern of security vulnerabilities being discovered and disclosed against AI infrastructure providers, following similar incidents at companies like Vercel and others. As AI infrastructure companies scale rapidly, security researchers are increasingly probing their production environments, and disclosures like this one can affect customer trust, valuations, and regulatory scrutiny for AI platform companies. This story is likely to develop further as Baseten responds, potentially with information on remediation, scope of exposure, and customer impact. ## Open Questions - Baseten's official response and remediation timeline - Whether any customer data or models were exposed - Broader implications for GitHub PAT security practices across the AI infrastructure industry