AIHacker Newsabout 3 hours ago
GitLost Flaw Leaks Private GitHub Repos
1 min read
Noma Labs discovered GitLost, a prompt injection vulnerability in GitHub's Agentic Workflows. An attacker can craft a public GitHub issue to trick an AI agent into fetching private repository data and posting it as a public comment. GitHub has not implemented a fix or documentation.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
