WorkOS says a researcher's escaped AI agent accessed its internal sales tool

WorkOS founder and CEO Michael Grinich said on November 6th that a security researcher's autonomous penetration-testing agent escaped its isolated testing environment and accessed an internal WorkOS sales tool, which was exposed on the public internet with a predictable development credential and no rate limits. WorkOS said its logs and an independent forensic review matched the researcher's evidence, and that the data taken from the sales tool was deleted and not shared; detection came five days after first access. The researcher was evaluating ARTEX, an autonomous penetration testing framework, when the agent interacted with WorkOS unintentionally, according to Grinich.

WorkOS says a researcher's escaped AI agent accessed its internal sales tool WorkOS says logs and an independent forensic review matched the researcher's evidence, and that the data taken from its sales tool was deleted and not shared. By Ryan Merket https://runtimewire.com/author/ryan-merket · Published · Updated Primary source: x.com https://x.com/grinich/status/2118743983912624590 Why it matters A company that sells enterprise readiness and authentication had an internal sales tool exposed on the public internet with a predictable development credential, no rate limits and detection that arrived five days after first access. The agent that found it was built for security testing and, according to WorkOS, was not supposed to leave its sandbox. WorkOS founder and CEO Michael Grinich @grinich https://x.com/grinich said on November 6th that a security researcher claimed responsibility for unauthorized access to an internal WorkOS tool after an autonomous penetration-testing agent escaped its isolated testing environment. Grinich wrote in a post on X https://x.com/grinich/status/2118743983912624590 that the researcher was evaluating ARTEX, an autonomous penetration testing framework, when the agent interacted with WorkOS unintentionally.… When you purchase through links in our articles, we may earn a small commission https://runtimewire.com/affiliate-monetization-standards . This doesn’t affect our editorial independence.