GitLost shows how a public issue can make GitHub's AI agent leak private repo data
Noma Labs researcher Sasi Levi disclosed a prompt-injection vulnerability called GitLost that allows attackers to trick GitHub's Agentic Workflows AI agent into reading private repository data and pos…