Case studies

Real findings, merged fixes

We'd rather show a few verifiable stories than a wall of unverifiable logos. Each case study below is a public, merged fix. The same rigour goes into client reviews under NDA.

Case studies

AI infrastructure

Path traversal in NVIDIA's RAG Blueprint MCP server

NVIDIA's RAG Blueprint shipped an MCP server that read user-supplied file paths with no validation. Any client could read arbitrary files and ingest them into the RAG collection.

CWE-22 path traversal · April 2026Read the case study

AI infrastructure

Five SQL injection vectors in Hugging Face's skills framework

Hugging Face's skills repository let AI agents drive a DuckDB database through a thin Python wrapper that built every query with f-strings. One file held five injection vectors, each reachable from agent-influenced input.

CWE-89 SQL injection · March 2026Read the case study

AI infrastructure

A pickle RCE footgun in RAGFlow's deserialiser

RAGFlow's deserialise_b64 helper chose bare pickle.loads behind a safety flag that was never set, so decoded database values were unpickled with no restrictions. Reading one crafted column could execute code inside the RAGFlow process.

CWE-502 deserialisation · May 2026Read the case study

Be a reference

Already shipping with Sebastion? Tell your story.

Customer references unlock the startup programme renewal discount and a permanent spot on this page (with editorial control on every word). We do the writing; you approve before anything ships.

Get in touch