--- title: The Vercel Breach Explains Why Identity Attack Path... description: Vercel suffered a breach after an employee connected the AI tool Context.ai to their corporate Google Workspace via an overly broad 'Allow All' OAuth grant.... canonical: https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Vercel Breach Explains Why Identity Attack Path Management Can’t Wait | daily.dev og:description: Vercel suffered a breach after an employee connected the AI tool Context.ai to their corporate Google Workspace via an overly broad 'Allow All' OAuth grant.... og:url: https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv og:image: https://api.daily.dev/og/posts/ZORltQGXV.png og:image:alt: The Vercel Breach Explains Why Identity Attack Path Management Can’t Wait og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Vercel Breach Explains Why Identity Attack Path Management Can’t Wait **[SpecterOps](https://daily.dev/sources/specterops)** · 8 min read · 0 upvotes · 0 comments ## Summary Vercel suffered a breach after an employee connected the AI tool Context.ai to their corporate Google Workspace via an overly broad 'Allow All' OAuth grant. Context.ai was compromised through an infostealer infection (Lumma Stealer) traced to a Roblox cheat download, exposing OAuth tokens that let attackers pivot into Vercel's Workspace and internal environments, exposing API keys, tokens, and database credentials. A group calling itself ShinyHunters claims responsibility and is demanding $2 million. The piece argues the real lesson isn't just OAuth permissions hygiene but a structural identity risk problem: any AI tool granted delegated access becomes a non-human identity whose compromise inherits enterprise trust relationships, and organizations need proactive identity attack path mapping rather than relying on detection after the fact. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did attackers actually breach Vercel through the Context.ai AI tool? An infostealer, reportedly Lumma Stealer, infected a Context.ai employee's endpoint via a Roblox cheat download in February 2026, leading to exfiltration of OAuth tokens from Context.ai's systems. One token belonged to a Vercel employee who had granted Context.ai's AI Office Suite 'Allow All' OAuth permissions against Vercel's enterprise Google Workspace, letting the attacker access Workspace and pivot into other Vercel environments, exposing API keys and database credentials. _Teams tracking third-party AI tool risks and OAuth exposure can follow breach breakdowns like this on daily.dev._ ### What is the Clean Source Principle in identity security? The Clean Source Principle states that the security of any resource is only as strong as the security of every resource with control over it, which is why domain controllers get heavy scrutiny in Active Directory environments since anything able to modify one can modify everything it controls. Applied to OAuth, granting a third-party AI tool broad access makes that tool's own infrastructure security a dependency of the connected system's security. _daily.dev surfaces identity and access management concepts like this for engineers hardening trust boundaries._ ### Why isn't least-privilege OAuth permissioning enough to prevent breaches like the Vercel one? Least privilege reduces blast radius but doesn't reveal which AI tools employees have already connected to corporate identity systems, what an adversary could reach from a given OAuth token, or which trust dependencies are highest-risk. Identity Attack Path Management instead asks what happens when access is abused and what an adversary can reach from it, since AI agents form trust relationships faster than governance reviews can track. _Security teams weighing IAM versus attack-path approaches can track this debate on daily.dev._ ## Similar posts on daily.dev - [Vercel Data Breach Linked to Earlier Context.ai Compromise](https://daily.dev/posts/vercel-data-breach-linked-to-earlier-context-ai-compromise-jzp24ggnp) · Security Boulevard · 0 upvotes · 0 comments - [83% of Cloud Breaches Start with Identity. AI Agents are About to Make it Worse.](https://daily.dev/posts/83-of-cloud-breaches-start-with-identity-ai-agents-are-about-to-make-it-worse--i8o4f7pul) · Security Boulevard · 1 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#cyber](https://daily.dev/tags/cyber), [#oauth](https://daily.dev/tags/oauth), [#security](https://daily.dev/tags/security), [#vercel](https://daily.dev/tags/vercel) [View this post on daily.dev](https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Vercel Breach Explains Why Identity Attack Path Management Can’t Wait","url":"https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv"},"datePublished":"2026-08-23T12:16:31.634Z","dateModified":"2026-10-15T02:25:09.651Z","description":"Vercel suffered a breach after an employee connected the AI tool Context.ai to their corporate Google Workspace via an overly broad 'Allow All' OAuth grant....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9fd22ec6d9e2d635a1f67b6fecce3ff4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9fd22ec6d9e2d635a1f67b6fecce3ff4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"SpecterOps","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"SpecterOps","logo":"https://media.daily.dev/image/upload/s--lR36Z4gn--/f_auto,q_auto/v1787487384/logos/specterops?_a=BAMAMicg0","url":"https://daily.dev/sources/specterops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,cyber,oauth,security,vercel","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"SpecterOps","item":"https://daily.dev/sources/specterops"},{"@type":"ListItem","position":3,"name":"The Vercel Breach Explains Why Identity Attack Path Management Can’t Wait"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/the-vercel-breach-explains-why-identity-attack-path-management-can-t-wait-zorltqgxv#faq","mainEntity":[{"@type":"Question","name":"How did attackers actually breach Vercel through the Context.ai AI tool?","acceptedAnswer":{"@type":"Answer","text":"An infostealer, reportedly Lumma Stealer, infected a Context.ai employee's endpoint via a Roblox cheat download in February 2026, leading to exfiltration of OAuth tokens from Context.ai's systems. One token belonged to a Vercel employee who had granted Context.ai's AI Office Suite 'Allow All' OAuth permissions against Vercel's enterprise Google Workspace, letting the attacker access Workspace and pivot into other Vercel environments, exposing API keys and database credentials. Teams tracking third-party AI tool risks and OAuth exposure can follow breach breakdowns like this on daily.dev."}},{"@type":"Question","name":"What is the Clean Source Principle in identity security?","acceptedAnswer":{"@type":"Answer","text":"The Clean Source Principle states that the security of any resource is only as strong as the security of every resource with control over it, which is why domain controllers get heavy scrutiny in Active Directory environments since anything able to modify one can modify everything it controls. Applied to OAuth, granting a third-party AI tool broad access makes that tool's own infrastructure security a dependency of the connected system's security. daily.dev surfaces identity and access management concepts like this for engineers hardening trust boundaries."}},{"@type":"Question","name":"Why isn't least-privilege OAuth permissioning enough to prevent breaches like the Vercel one?","acceptedAnswer":{"@type":"Answer","text":"Least privilege reduces blast radius but doesn't reveal which AI tools employees have already connected to corporate identity systems, what an adversary could reach from a given OAuth token, or which trust dependencies are highest-risk. Identity Attack Path Management instead asks what happens when access is abused and what an adversary can reach from it, since AI agents form trust relationships faster than governance reviews can track. Security teams weighing IAM versus attack-path approaches can track this debate on daily.dev."}}]} ```