#Noma Labs

‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Security researchers have found a vulnerability in GitHub’s AI coding agent that allows it to leak private repository contents through a polite issue request. The flaw, named GitLost, has no code fix and has not been documented by GitHub.