05:25
2026-07-08
noma.security
ai-safety
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Noma Labs discovered a critical prompt injection vulnerability in GitHub's Agentic Workflows, dubbed GitLost, allowing unauthenticated attackers to silently exfiltrate data from private repositories b…