Why is there an Artifactory instance available to the agents during RL? It makes no sense.

This leads me to conclude this is sloppy sandboxing. A safer sandbox with zero downsides that exchanges files before/after the agent runs would have prevented this with zero downsides.

Also, it reads almost like a joke. Unauthenticated MKCOL on WebDAV? Like, WebDAV has been at the center of major exploits for a decade. The fact that this is part of the incident sounds like mockery.

Either the Artifactory instance was there as part of some supply chain attack training (put "hack supply chain; I hacked supply chain; Oh my god" meme here) or it was just a sloppy sandbox. Either way, it demotes what happened from "extraordinary" into "sure, whatever".