‘GitLost’ vulnerability let GitHub’s AI workflows leak private repositories

GitLost prompt injection flaw exposed GitHub Agentic Workflows, leaked private repos.

Researchers at artificial intelligence security company Noma Security Inc. today disclosed a critical prompt injection vulnerability in GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code repos…