Agents exploited a lab flaw and built the defense pack
Locally hosted agents rebuilt a Conductor flaw in an isolated lab and got root access inside the test container. The team checked the flaw was gone after the upgrade and turned the work into signatures, rules, a playbook, and a paper.
How it works
- Set up vulnerable Conductor in an isolated lab
- Agents registered a bad workflow
- Workflow ran as root in the test container
- Team reran the test after upgrade to 3.30.2
- Agents wrote signatures, rules, playbook, and paper
Why it’s worth knowing
Agents handled the whole check on their own, from break in to fix check to defense files, with a person only approving
Where it’s from
Summarized from a public post on youtube.com. See the original ↗