GitLost: How We Tricked GitHub's AI Agent Into Leaking Private Repos

An indirect prompt injection through public GitHub issues let attackers exploit GitHub's Agentic Workflows to extract data from private repositories

Read external article →

security ai agents