Railway’s AI agents go off the track on a rival’s network
AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questioned why Railway employees were attempting to breach his infrastructure. Runzer said he had halted the testing harness after it began reaching too far. Railway co-founder and CEO Jake Cooper apologized, saying the models were “getting a bit too good at this point,” and pledged to prohibit non-manual external testing. According to Manders , the agents attempted to receive credentials from an application container, request platform secrets, access cloud-provider metadata, discover internal databases and caches, and scan all 65,536 addresses on Primcloud’s internal network twice.