Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.