⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

GitHub Agentic Workflows Feature Vulnerable to GitLost Prompt Injection

July 7, 2026

GitHub Agentic Workflows, a feature in public preview, allows AI agents to automate tasks but is vulnerable to indirect prompt injection attacks like GitLost.

Discovered from: GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data