Evidence · DiggingBeagle record
AIR Security VerCellBreak mTLS AIA indirect exfiltration experiment
First-party researcher write-up demonstrating how an allowlisted mTLS endpoint can fetch an attacker-controlled AIA URL containing encoded data.
- Published
- Oct 12, 2026
- Source role
- primary disclosure
Evidence record
First-party researcher write-up demonstrating how an allowlisted mTLS endpoint can fetch an attacker-controlled AIA URL containing encoded data.
Claim-level citations (2)
- supportsAn mTLS AIA lookup relayed secret-bearing URLs outside an agent sandbox allowlist: AIR Security describes a controlled mTLS certificate-chain scenario where an approved server fetched an attacker-defined AIA URL containing encoded secret material.
Let’s get technical; mTLS and AIA; Attack flow steps 1-7
- supportsAn mTLS AIA lookup relayed secret-bearing URLs outside an agent sandbox allowlist: The researchers identify prior agent compromise, an allowed mTLS endpoint and server-side AIA fetching as necessary conditions, and report Vercel did not accept it in bounty scope.
Limitations; bounty scope statement