GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data
Researchers at Noma Security have demonstrated a novel prompt injection attack, dubbed GitLost, that exploits GitHub Agentic Workflows to leak private repository…
Tag: GitLost
GitHub Agentic Workflows Feature Vulnerable to GitLost Prompt Injection
GitHub Agentic Workflows, a feature in public preview, allows AI agents to automate tasks but is vulnerable to indirect prompt injection attacks…
Anthropic Claude AI Model Used in GitHub Agentic Workflows Prompt Injection
Anthropic Claude is one of the AI models that can power GitHub Agentic Workflows, which are vulnerable to the GitLost prompt injection…