AISecurityWeekabout 3 hours ago
GitHub Workflows Vulnerable to Prompt Injection
1 min read
Attackers can exploit a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The vulnerability targets GitHub's agentic workflows, enabling prompt injection attacks that bypass access controls.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
