Case studies

Findings we've shipped upstream

Each case study below is a public, merged fix in a widely used open-source project. The same rigour goes into client reviews under NDA.

Case studies

AI infrastructure

Path traversal in NVIDIA's RAG Blueprint MCP server

NVIDIA's RAG Blueprint shipped an MCP server that read user-supplied file paths with no validation. Any client could read arbitrary files and ingest them into the RAG collection.

CWE-22 path traversal · April 2026Read the case study

AI infrastructure

Five SQL injection vectors in Hugging Face's skills framework

Hugging Face's skills repository let AI agents drive a DuckDB database through a thin Python wrapper that built every query with f-strings. One file held five injection vectors, each reachable from agent-influenced input.

CWE-89 SQL injection · March 2026Read the case study

AI infrastructure

A pickle RCE footgun in RAGFlow's deserialiser

RAGFlow's deserialise_b64 helper chose bare pickle.loads behind a safety flag that was never set, so decoded database values were unpickled with no restrictions. Reading one crafted column could execute code inside the RAGFlow process.

CWE-502 deserialisation · May 2026Read the case study

Be a reference

Already shipping with Sebastion? Tell your story.

Customer references unlock the startup programme renewal discount and a permanent spot on this page (with editorial control on every word). We do the writing; you approve before anything ships.

Get in touch