# Baseten rotated GitHub token exposed in public container image

_Published Tuesday, September 15, 2026 at 8:07 PM EDT · Security, AI · Latest · Tier 1 — Major_

![We wanted to use Baseten for inference. We ended up with admin access to Baseten GitHub repos - Strix — Primary](https://www.strix.ai/blog-baseten-cover.png)

Security firm Strix disclosed that it found a working GitHub personal access token in the build history of a publicly downloadable Baseten container image in July. Strix said the token had administrative and push access to Baseten product, GitOps and Homebrew repositories, plus access to other private repositories. Baseten made the Harbor registry project private and rotated the token the next day, according to Strix's disclosure timeline.

## Sources

- [strix.ai](https://www.strix.ai/blog/baseten-harbor-github-pat-takeover)

---
Canonical: https://techandbusiness.org/newswire/FxEpGFvAr2BDkfI_8w4Vo7
Published: 2026-09-16T00:07:42.307Z
Story chronology: 2026-09-15T18:11:24.000Z
Retrieved: 2026-09-16T02:05:47.518Z
Publisher: Tech & Business (techandbusiness.org)