Vercel Confirms Breach After OAuth Grant via Compromised AI Vendor

Vercel, the cloud platform behind Next.js, confirmed on Sunday that attackers gained un The entry point was Context.ai, an AI tool installed Vercel CEO Guillermo Rauch described the attacker as "highly sophisticated and, I strongly suspect, significantly accelerated OX Security's analysis found that the attacker escalated privileges Jaime Blasco, CTO of Nudge Security, independently surfaced a second OAuth grant tied to Context.ai's Google Workspace integration. Vercel said it is now defaulting environment variable creation to "sensitive" and has revoked all active Context.ai OAuth tokens. The incident highlights a broader vulnerability in how companies manage OAuth grants from third-party applications. Nudge Security research indicates the average enterprise has more than 300 SaaS apps with OAuth integrations, many of which receive limited security review.