TLDR Tech / Dev
GitLost: How We Tricked GitHub's AI Agent into Leaking Private Repos
Noma Labs uncovered a critical vulnerability named GitLost in GitHub's newly launched Agentic Workflows, which allowed unauthorized users to extract data from private repositories by exploiting an indirect prompt injection attack through public GitHub issues.
Read the full story