Railway Admits an Employee's AI Agent Hacked a Competitor

Development platform Railway acknowledged that one of its own employees used an AI agent to worm into a rival's servers. According to Primcloud founder Josh Manders, the agent pulled credentials from inside its app container, used them to request every secret on the platform, tried the cloud provider's metadata endpoint, and port-scanned all 65,536 internal addresses twice in about 24 commands over 15 minutes. The engineer, Jake Runzer, admitted it on X, saying the harness was 'going off the rails and reaching too far.' Every attempt was blocked and nothing was accessed.