github news
2 stories
vulnerabilityhigh
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
A newly identified vulnerability, named GitLost, has been discovered that allows for the exfiltration of private data from GitHub's Agentic Workflows. The flaw enables an unauthenticated attacker to exploit a public GitHub Issue to silently steal information from private repositories.
vulnerabilityhigh
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Researchers at Noma Security have uncovered a vulnerability in GitHub's Agentic Workflows that could allow malicious actors to exfiltrate private repository data. The exploit leverages a public GitHub Issue to trick the workflow system into disclosing sensitive information from private repositories.