Storia in 7 fonti

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data,

Raccontata dasiliconangle.comthehackernews.comdarkreading.comtheregister.cominfoworld.comthenextweb.comsecurityweek.com

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo10 h fa

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data,

originale

darkreading.com1 g fa

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

Leggi questa versione → originale

siliconangle.com1 g fa

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

Leggi questa versione → originale

infoworld.com23 h fa

GitHub AI agent leaks private repositories via prompt injection attack

Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

Leggi questa versione → originale

thehackernews.com1 g fa

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

Leggi questa versione → originale

theregister.com1 g fa

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

Leggi questa versione → originale

Timeline cronologica

1. martedì 7 luglio 2026·siliconangle.com
   

   'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

   'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

2. martedì 7 luglio 2026·thehackernews.com
   

   Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

   The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

3. martedì 7 luglio 2026·darkreading.com
   

   'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

   The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

4. martedì 7 luglio 2026·theregister.com
   

   GitHub AI agent leaks private repos when asked nicely

   Per usual, there's no fix - or even any documentation - for GitLost

5. mercoledì 8 luglio 2026·infoworld.com
   

   GitHub AI agent leaks private repositories via prompt injection attack

   Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

6. mercoledì 8 luglio 2026·thenextweb.com
   

   GitLost: GitHub's AI agent leaks private repos when asked

   Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

7. mercoledì 8 luglio 2026·securityweek.com
   

   Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

   A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data,