{"id":7170,"date":"2026-11-03T14:00:00","date_gmt":"2026-11-03T14:00:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce"},"modified":"2026-11-03T14:00:00","modified_gmt":"2026-11-03T14:00:00","slug":"reachy-mini-cve-2026-96455-unauthenticated-rce","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/reachy-mini-cve-2026-96455-unauthenticated-rce","title":{"rendered":"Reachy Mini CVE-2026-96455: One HTTP Request Ran Code as Root on Hugging Face\u2019s Robot"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A desktop robot should not have an unauthenticated &#8220;install&#8221; button that runs as root. <a href=\"https:\/\/theinjection.dev\/week\/2026-w45\/\" target=\"_blank\" rel=\"noreferrer noopener\">The Injection<\/a> reports that <a href=\"https:\/\/theinjection.dev\/week\/2026-w45\/\" target=\"_blank\" rel=\"noreferrer noopener\">JFrog<\/a> published <a href=\"https:\/\/theinjection.dev\/week\/2026-w45\/\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2026-96455<\/a> (CVSS 8.8) on November 3, 2026, covering Reachy Mini, the open-source robot from Pollen Robotics and Hugging Face. JFrog&#8217;s write-up, as summarized there, says the robot &#8220;exposes an unauthenticated install endpoint that runs attacker code as root.&#8221; JFrog recommends blocking port 8000. The Injection&#8217;s week-45 listing does not name a fixed version.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Product:<\/strong> Reachy Mini, an open-source robot associated with Pollen Robotics and Hugging Face.<\/li><li><strong>Bug:<\/strong> An unauthenticated HTTP install endpoint executes attacker-supplied code as root (CVE-2026-96455, CVSS 8.8).<\/li><li><strong>Immediate mitigation:<\/strong> Block port 8000 so the endpoint is not reachable on the network.<\/li><li><strong>Patch status:<\/strong> As of The Injection&#8217;s November 2\u20138 roundup, no fixed version was listed. Treat the issue as unpatched until the vendor publishes one.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Physical AI devices increasingly ship with a local web or agent API so a model can install skills, move the arm, or update software. If that API has an install endpoint with no authentication, anyone who can reach the port can run code with the privileges of the service \u2014 here, root. JFrog published the full chain on November 3.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">i10x has not independently confirmed whether a later firmware or software release has since closed the endpoint. Until a vendor advisory names a fixed version, the safe assumption is that network exposure of port 8000 remains dangerous.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>If you have a Reachy Mini on a lab or office network, block inbound access to port 8000 at the host and on the local network, and do not expose the robot to the internet.<\/li><li>Watch Pollen Robotics and Hugging Face for a patched release; apply it when it exists, then confirm the install endpoint requires authentication and no longer runs as root.<\/li><li>If the device has been reachable on a shared network, treat it as potentially compromised and rebuild or re-image it.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is what happens when an &#8220;agent runtime&#8221; is bolted onto a machine that can also move and that runs as root. The vulnerability class is old \u2014 unauthenticated RCE on a debug or install port \u2014 but the target is new enough that many labs will have put the robot on the same Wi-Fi as laptops and other devices. Until there is a patch, network isolation is the control.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This i10x report is based on The Injection&#8217;s week-45 summary of JFrog&#8217;s November 3, 2026 advisory for CVE-2026-96455. i10x did not test a Reachy Mini and did not review a later vendor patch announcement after that roundup.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/theinjection.dev\/week\/2026-w45\/\" target=\"_blank\" rel=\"noreferrer noopener\">The Injection, week 45 of 2026<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On November 3, 2026, JFrog published CVE-2026-96455 (CVSS 8.8) in Reachy Mini, the open-source robot from Pollen Robotics and Hugging Face. An unauthenticated install endpoint can run attacker code as root. JFrog recommends blocking port 8000.<\/p>\n","protected":false},"author":2,"featured_media":7169,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Reachy Mini","_nx_sec_status":"no-fix-yet","_nx_sec_kicker":"URGENT: Hugging Face\u2019s Reachy Mini robot had unauthenticated root RCE"},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7170","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Reachy Mini CVE-2026-96455: Unauthenticated Root RCE<\/title>\n<meta name=\"description\" content=\"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Reachy Mini CVE-2026-96455: Unauthenticated Root RCE\" \/>\n<meta property=\"og:description\" content=\"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-03T14:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Reachy Mini CVE-2026-96455: One HTTP Request Ran Code as Root on Hugging Face\u2019s Robot\",\"datePublished\":\"2026-11-03T14:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce\"},\"wordCount\":456,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-03T14:00:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce\",\"name\":\"Reachy Mini CVE-2026-96455: Unauthenticated Root RCE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp\",\"datePublished\":\"2026-11-03T14:00:00+00:00\",\"description\":\"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A small desktop robot arm on a workbench in a lab, window light, tools and a laptop out of focus in the background.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/reachy-mini-cve-2026-96455-unauthenticated-rce#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Reachy Mini CVE-2026-96455: One HTTP Request Ran Code as Root on Hugging Face\u2019s Robot\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Reachy Mini CVE-2026-96455: Unauthenticated Root RCE","description":"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce","og_locale":"en_US","og_type":"article","og_title":"Reachy Mini CVE-2026-96455: Unauthenticated Root RCE","og_description":"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.","og_url":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce","og_site_name":"i10X News","article_published_time":"2026-11-03T14:00:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Reachy Mini CVE-2026-96455: One HTTP Request Ran Code as Root on Hugging Face\u2019s Robot","datePublished":"2026-11-03T14:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce"},"wordCount":456,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-03T14:00:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce","url":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce","name":"Reachy Mini CVE-2026-96455: Unauthenticated Root RCE","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp","datePublished":"2026-11-03T14:00:00+00:00","description":"JFrog\u2019s CVE-2026-96455 says Reachy Mini, from Pollen Robotics and Hugging Face, has an unauthenticated install endpoint that runs code as root. Block port 8000.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/reachy-mini-cve-2026-96455-unauthenticated-rce-title.webp","width":1344,"height":768,"caption":"A small desktop robot arm on a workbench in a lab, window light, tools and a laptop out of focus in the background."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/reachy-mini-cve-2026-96455-unauthenticated-rce#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Reachy Mini CVE-2026-96455: One HTTP Request Ran Code as Root on Hugging Face\u2019s Robot"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7170"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7170\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7169"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7170"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7170"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}