GitHub AI Agent Leaks Private Data via Prompt Injection

Noma Security discovered GitLost, a prompt-injection exploit that tricks GitHub's Agentic Workflows into leaking private repository data. Attackers embed concealed instructions in public GitHub issues, inducing AI agents to reveal confidential information in public comments.