Never Wait for Approval — Prompt Injection in Strix AI Pentesting Agent Steals Cloud Credentials

A prompt injection vulnerability in Strix AI pentesting agent enables arbitrary command execution through malicious project files. The tool designed to red-team others gets red-teamed by its own target — cloud credentials exfiltrated through the project you are scanning.