Evidence · DiggingBeagle record
Air Security: OpenAI Sesame Render skill dependency failure
Original October 14 investigation into an official Render deployment skill referring to an unowned domain; investigator-operated sinkhole received requests bearing real authentication headers.
- Source role
- primary disclosure
Evidence record
Original October 14 investigation into an official Render deployment skill referring to an unowned domain; investigator-operated sinkhole received requests bearing real authentication headers.
Claim-level citations (4)
- supportsAn official deployment skill introduced an unowned host into production application configurations: Render removed references to the mistaken domain on August 14 and OpenAI removed the affected bundled Render plugin on August 26, according to repository changes cited by the researchers.
Render & OpenAI responses; identified August commits
- supportsAn official deployment skill introduced an unowned host into production application configurations: After registering the domain for a passive sinkhole, the investigators observed live application requests containing Authorization: Bearer headers.
Theory to Reality; sinkhole received HEAD and GET with authorization header
- supportsAn official deployment skill introduced an unowned host into production application configurations: Using the official skill for a normal deployment request, researchers observed Codex copying the unowned host into generated Go service defaults and deployment configuration.
Theory to Reality; generated application code and generated configuration
- supportsAn official deployment skill introduced an unowned host into production application configurations: The reference files in the render-deploy skill described render-internal.com as Render private networking, although the real provider had no ownership or documented dependency on that domain.
The Dependency of My Dependency Is My Vulnerability; quoted references/service-types.md and configuration-guide.md