AISiliconANGLEabout 2 hours ago
GitLost leaks private repos via GitHub AI workflows
1 min read
Noma Security disclosed GitLost, a prompt injection vulnerability in GitHub's Agentic Workflows. An attacker posted a crafted issue in a public repository, causing the AI agent to exfiltrate README files from private repositories and post them publicly. Adding the word "additionally" bypassed GitHub's guardrails.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
