BREAKING
GitLost Flaw Hits GitHub AI Agent
How the Attack Unfolds
1
Post crafted Issue
↓
2
Agent reads body
↓
3
Fetch private repo
↓
4
Leak as public comment
What It Takes to Trigger
Prerequisite
Low bar
●
Issue-posting rights on public repo
●
Anonymous posting possible
●
No coding skills
Impact
High
●
Same-Org private repos leaked
●
README posted publicly
●
Indirect prompt injection
One Word Bypasses Guardrails
Prompt Injection: The New SQLi
Least Privilege and Human Review
AI NEWS BLITZ
Noma Labs disclosed a flaw called GitLost that turns GitHub's AI agent against private repos.