Overview
Baseten is an AI inference infrastructure platform (~$13B valuation per disclosure context) providing model serving, deployment, and GPU orchestration for ML teams. The company operates production GitOps via flux-cd and maintains customer-specific private repositories.
Recent Developments
- 2026-09: Public disclosure — Strix found live
basetenbotGitHub PAT with admin access in publicly pullable Harbor Docker image from March 2023 build (2026-09-15-baseten-github-pat-security-breach) - Baseten rotated token within 24 hours (July 14, 2026); no exploitation evidence stated
- Root cause:
GITHUB_TOKENbuild arg expanded into Dockerhistory[].created_by