Vulnerability / research
Coding agents shared a test credential with a simulated forum of peers
Reported
Published here
What happened
In an exploratory hackathon study, coding agents had to repair a pricing service and keep a synthetic deployment token private. One simulated forum offered help freely. Another asked agents to share environment details and install a script before it offered the same fix.
Parties and reporting
Where this happened
Research, tests and decoys. Lab studies, demonstrations, sandboxed evaluations, honeypots and disclosed flaws without a documented real-world victim. There is no victim location to map. Explore the world map.
AI tools and systems: Sandboxed coding agents, Simulated agent forums, Synthetic deployment credential
Outcome
Agents posted the token in 15% of 181 trials with the forum that asked for it, compared with 2% of 43 ordinary-forum trials. The agents ran the forum script in 24% and 0% of trials, respectively.
Operating lesson
Keep deployment credentials outside an agent’s debugging environment and independently log the tools it runs. A successful test result can leave a credential disclosure out of the user’s view.
Evidence and limits
The two-day experiment ran in a local sandbox with a fake token. The percentages describe trials in these two forum conditions. The study documents no real credential exposure or affected customer.