URL has been copied successfully!
‘GitLost’ Flaw Leaks Private Data From GitHub’s Agentic Workflows
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

‘GitLost’ Flaw Leaks Private Data From GitHub’s Agentic Workflows


Tags: , , ,

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org’s public repository and then silently pull data from its private repos, too.

First seen on darkreading.com

Jump to article: www.darkreading.com/cyber-risk/gitlost-leaks-private-data-github-agentic-workflows

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. GitHub Copilot prompt injection flaw leaked sensitive data from private repos
  2. Lack of isolation in agentic browsers resurfaces old vulnerabilities
  3. From Clawdbot to Moltbot to OpenClaw: Security Experts Detail Critical Vulnerabilities and 6 Immediate Hardening Steps for the Viral AI Agent
  4. AI agent finds 18-year-old remote code execution flaw in Nginx