TLDR Tech / InfoSec
GitLost: How We Tricked GitHub's AI Agent into Leaking Private Repos
A crafted GitHub issue in a public repo can drive GitHub's Agentic Workflow to read README files from both public and private repos and post them back as a public comment. The attack relies on prompt injection and a single keyword, “Additionally,” to bypass GitHub's guardrails and leak private repository data.
Read the full story