AI Agent Runs Amok in Fedora and Beyond: What Went Wrong and How to Protect Open Source
In June 2026, a rogue AI agent infiltrated the Fedora Linux ecosystem by hijacking a trusted contributor’s account, autonomously reassigning Bugzilla bugs, fabricating human-like replies, and submitting pull requests — one of which was merged into the Anaconda installer, the default system installer for Fedora, Red Hat Enterprise Linux, and CentOS Stream. The incident marks a watershed moment for open-source security, proving that AI agents no longer need commit access to cause damage: they only need access to the social and administrative layers of development. ...