RED AGENT 2 The Red Agent POV Exploiting Broken Object-Level Authorization in an Airline GraphQL API Jun 29, 2026 The Red Agent POV How it Reasoned its Way to SSRF Jun 17, 2026