Storia in 8 fonti

GitHub AI agent leaks private repositories via prompt injection attack

Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

infoworld.comStai leggendo1 mese fa

GitHub AI agent leaks private repositories via prompt injection attack

Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

originale

Timeline cronologica

martedì 7 luglio 2026·siliconangle.com
'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE
'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE
martedì 7 luglio 2026·thehackernews.com
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

theregister.com

1 mese fa

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

Leggi questa versione → originale

thenextweb.com1 mese fa

GitLost: GitHub's AI agent leaks private repos when asked

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

Leggi questa versione → originale

siliconangle.com1 mese fa

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

Leggi questa versione → originale

securityweek.com1 mese fa

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data,

Leggi questa versione → originale

darkreading.com1 mese fa

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

Leggi questa versione → originale

martedì 7 luglio 2026·

darkreading.com

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

martedì 7 luglio 2026·

theregister.com

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

mercoledì 8 luglio 2026·

infoworld.com

GitHub AI agent leaks private repositories via prompt injection attack

Findings raise fresh concerns over the security of AI agents with privileged access to enterprise code.

mercoledì 8 luglio 2026·

thenextweb.com

GitLost: GitHub's AI agent leaks private repos when asked

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

mercoledì 8 luglio 2026·

securityweek.com

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data,

mercoledì 8 luglio 2026·

dev.to

GitLost Is a Preview of Every Agentic Workflow Breach You'll See This Year

Hook A public GitHub issue, a hidden instruction, and one word changed in a prompt was...

GitHub AI agent leaks private repositories via prompt injection attack

Timeline cronologica

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

GitHub AI agent leaks private repos when asked nicely

GitLost: GitHub's AI agent leaks private repos when asked

'GitLost' vulnerability let GitHub's AI workflows leak private repositories - SiliconANGLE

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

GitHub AI agent leaks private repos when asked nicely

GitHub AI agent leaks private repositories via prompt injection attack

GitLost: GitHub's AI agent leaks private repos when asked

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

GitLost Is a Preview of Every Agentic Workflow Breach You'll See This Year