GitHub’s AI workflow can be abused to leak private repository contents
Researchers found a prompt‑injection flaw in GitHub’s Agentic Workflows that lets anyone post a crafted issue in a public repo and have the AI agent silently pull files from private repos in the same organization. The bug, dubbed GitLost, highlights how trust boundaries in AI‑driven automation can expose sensitive code.