20:00
2026-07-23
infoq.com
ai-safety
Indirect Prompt Injection Exploits GitHub's AI Agent to Leak Private Repository Data
Noma Security discovered a prompt-injection exploit called GitLost that tricks GitHub's Agentic Workflows into leaking private repository data by embedding concealed instructions in public issues. The…