🤖 GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos

Noma Labs found a prompt injection flaw (GitLost) in GitHub Agentic Workflows: posting a crafted issue in a public org repo causes the AI agent to exfiltrate private repository contents as a public comment, bypassing guardrails via the keyword "Additionally.".

https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos

#AI