ReliaQuest: LLM agent orchestration platform Cairn led a server intrusion
ReliaQuest's threat research team disclosed a server intrusion incident, assessing that an LLM-driven agent executed most of the attack's steps, and the attacking host ran a live panel of the open-source orchestration platform Cairn. The attacker ran hundreds of commands in less than 24 hours through a login-free job submission interface, gaining full administrative control of the server, without using new malware or zero-day exploits. The attacker invoked the Nashorn engine via Spring Batch jobs to execute code, retrieved output in 1800-byte chunks through error messages, read plaintext credentials from configuration files, enabled xp_cmdshell, and escalated to SYSTEM using PrintSpoofer and GodPotato. ReliaQuest stated it could not determine how many agents were involved, which model drove them, or the degree of human approval.
The report reconstructs how the attacker used the open-source orchestration platform to schedule LLM agents and took over the server within 24 hours through a single exposed interface, allowing defenders to check the attack surface and job log retention accordingly.