TLDR Tech / Practical
GitHub Copilot CLI Flaw Exposes Developer Secrets
Adversa AI researchers have discovered a Cryptographic Context Injection vulnerability in the GitHub Copilot CLI that allows it to read local files and send developer secrets to an attacker-controlled URL when operating in autopilot mode. The exploit involves sending encrypted instructions that the coding agent decrypts and executes within its own trusted environment. GitHub acknowledged the finding but did not classify it as a vulnerability, noting that the user had explicitly authorized the agent to access external content and operate with full autonomy.
Read the full story