1
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.
The Agent Security and Governance Platform that helps enterprise security teams enable AI without losing control.
Visit noma.security → On Hacker News Jul 2026 – Jul 2026
Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.