{"id":7206,"date":"2026-11-11T15:30:56","date_gmt":"2026-11-11T15:30:56","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize"},"modified":"2026-11-11T15:30:56","modified_gmt":"2026-11-11T15:30:56","slug":"active-support-dos-flaw-action-cable-safe-constantize","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/active-support-dos-flaw-action-cable-safe-constantize","title":{"rendered":"Active Support DoS Flaw Lets Unauthenticated Attackers Crash Rails Servers via Action Cable"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">DANGER: Unauthenticated Action Cable Exploit Enables Server Crashes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A high-severity denial-of-service vulnerability in Ruby on Rails Active Support allows unauthenticated attackers to crash application servers by exploiting a flaw in the `safe_constantize` method. The vulnerability, tracked as CVE-2026-126080 with a CVSS score of 7.5, affects Rails applications that mount Action Cable endpoints.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Vulnerability Details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When constant lookup raises a `LoadError`, the `ActiveSupport::Inflector#safe_constantize` method (and `String#safe_constantize`) builds a regular expression from the requested constant name without properly escaping it. This allows attackers who control the input to craft patterns that trigger defects in Ruby&#8217;s regular expression compiler, potentially causing server process crashes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Action Cable passes the `channel` value of each `subscribe` command to `safe_constantize` before any channel lookup. In the default configuration, an unauthenticated client of the Action Cable endpoint can reach this vulnerable code path. New Rails applications mount Action Cable by default at `\/cable` via `config.action_cable.mount_path`.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Affected Applications<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Applications are vulnerable if they meet all of these conditions:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Mount Action Cable (default at `\/cable`) or otherwise pass untrusted input to `safe_constantize`<\/li><li>Accept Action Cable connections from untrusted clients<\/li><li>Do not authenticate connections in `ApplicationCable::Connection#connect` (the default behavior unless explicitly added)<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Repeated malicious requests could keep affected applications unavailable through sustained denial of service.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Affected Versions<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>activesupport >= 8.1.0.beta1, < 8.1.4.1<\/li><li>activesupport < 8.0.5.2<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Patches and Mitigation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Patched versions are available:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>activesupport 8.1.4.1<\/li><li>activesupport 8.0.5.2<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The fix changes the constant name validation to match the first segment against the error message as a literal string rather than compiling a regular expression. This returns the same result as before for constant names containing no regex syntax.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For applications unable to upgrade immediately:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Applications not using Action Cable can set `config.action_cable.mount_path = nil` to remove the endpoint<\/li><li>Applications using Action Cable can call `reject_unauthorized_connection` in `ApplicationCable::Connection#connect` for unauthenticated clients, though this only limits exposure to authenticated users and does not fully remove the vulnerability<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Patch files are available for manual application:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Rails 8.1: https:\/\/github.com\/rails\/rails\/commit\/95aa9e416016524956d4904fed96eaed079580bb.patch<\/li><li>Rails 8.0: https:\/\/github.com\/rails\/rails\/commit\/210ac22d446c8e2625b091e79256806b836eee20.patch<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Discovery and Attribution<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability was responsibly reported by Felix Tscheulin (flixt) through HackerOne researcher scheja, and independently discovered by Bucky Wolfe (Igneous), who provided a proof-of-concept demonstrating server crashes. The Anthropic OSS Scanner also independently identified the issue (ANT-2026-ZUN5KU3Q).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/advisories\/GHSA-8474-xrp6-wh69\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Advisory Database &#8211; GHSA-8474-xrp6-wh69<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>A high-severity denial-of-service vulnerability in Ruby on Rails Active Support allows unauthenticated attackers to crash server processes through crafted Action Cable requests that exploit regex compilation defects.<\/p>\n","protected":false},"author":2,"featured_media":7205,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Ruby on Rails Active Support versions prior to 8.1.4.1 and 8.0.5.2","_nx_sec_status":"patch-available","_nx_sec_kicker":"DANGER: Unauthenticated Rails DoS Attack Vector"},"categories":[65,22,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7206","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security","category-coding","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Active Support DoS Flaw Crashes Rails via Action Cable<\/title>\n<meta name=\"description\" content=\"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Active Support DoS Flaw Crashes Rails via Action Cable\" \/>\n<meta property=\"og:description\" content=\"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-11T15:30:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Active Support DoS Flaw Lets Unauthenticated Attackers Crash Rails Servers via Action Cable\",\"datePublished\":\"2026-11-11T15:30:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize\"},\"wordCount\":428,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/active-support-dos-flaw-action-cable-safe-constantize-title.webp\",\"articleSection\":[\"AI Security\",\"Coding\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-11T15:30:56+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize\",\"name\":\"Active Support DoS Flaw Crashes Rails via Action Cable\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/active-support-dos-flaw-action-cable-safe-constantize-title.webp\",\"datePublished\":\"2026-11-11T15:30:56+00:00\",\"description\":\"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/active-support-dos-flaw-action-cable-safe-constantize-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/active-support-dos-flaw-action-cable-safe-constantize-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Server room with emergency red lighting illuminating rows of rack-mounted servers, suggesting system failure or critical security incident\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/active-support-dos-flaw-action-cable-safe-constantize#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Active Support DoS Flaw Lets Unauthenticated Attackers Crash Rails Servers via Action Cable\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Active Support DoS Flaw Crashes Rails via Action Cable","description":"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize","og_locale":"en_US","og_type":"article","og_title":"Active Support DoS Flaw Crashes Rails via Action Cable","og_description":"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.","og_url":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize","og_site_name":"i10X News","article_published_time":"2026-11-11T15:30:56+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Active Support DoS Flaw Lets Unauthenticated Attackers Crash Rails Servers via Action Cable","datePublished":"2026-11-11T15:30:56+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize"},"wordCount":428,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp","articleSection":["AI Security","Coding","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-11T15:30:56+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize","url":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize","name":"Active Support DoS Flaw Crashes Rails via Action Cable","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp","datePublished":"2026-11-11T15:30:56+00:00","description":"Critical Active Support DoS vulnerability in safe_constantize allows unauthenticated attackers to crash Rails servers through Action Cable endpoints.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/active-support-dos-flaw-action-cable-safe-constantize-title.webp","width":1344,"height":768,"caption":"Server room with emergency red lighting illuminating rows of rack-mounted servers, suggesting system failure or critical security incident"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/active-support-dos-flaw-action-cable-safe-constantize#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Active Support DoS Flaw Lets Unauthenticated Attackers Crash Rails Servers via Action Cable"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7206"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7206\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7205"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7206"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7206"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}