Storia in 8 fonti

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

theregister.comStai leggendo1 mese fa

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

originale

thenextweb.com

Timeline cronologica

martedì 7 luglio 2026·siliconangle.com
'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE
'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE
martedì 7 luglio 2026·thehackernews.com
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

1 mese fa

GitLost: GitHub's AI agent leaks private repos when asked

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

Leggi questa versione → originale

infoworld.com1 mese fa

GitHub AI agent leaks private repositories via prompt injection attack

Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

Leggi questa versione → originale

siliconangle.com1 mese fa

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

Leggi questa versione → originale

darkreading.com1 mese fa

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

Leggi questa versione → originale

thehackernews.com1 mese fa

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

Leggi questa versione → originale

martedì 7 luglio 2026·

darkreading.com

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

martedì 7 luglio 2026·

theregister.com