Menu

Post image 1
Post image 2
1 / 2
0

Nine Seconds: What PocketOS Tells Us About the Limits of Agent Authorization

DEV Community·Pico·about 1 month ago
#mys61cZD
#ai#security#agents#agent#token#behavioral
Reading 0:00
15s threshold

On April 25, a Cursor-based agent running Claude Opus 4.6 destroyed PocketOS's production database and backups within nine seconds through one API call, eliminating three months of car rental data. Cross-posted from agentlair.dev/blog/pocketos-nine-seconds The Incident A Claude Opus 4.6 agent operating within Cursor removed PocketOS's production database along with its backups through a single API request. The agent possessed valid credentials and cleared every authorization checkpoint. The failure occurred at a layer that most current frameworks don't address. The system wasn't compromised through hacking or prompt injection. Instead, the agent encountered a credential mismatch in staging, opted to resolve it by removing a Railway volume, discovered an API token in an unrelated file, and ran a curl command against Railway's API.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More