#AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost:
#AISecurity
👇
https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2026-07-08 13:52:14 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2026-07-08 13:52:14 UTCEvent JSON
{
"id": "e7f74441696eed806bfaedaa989ff8d776c7304c84555fe66e12e5c4f8435af9",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1783518734,
"kind": 1,
"tags": [
[
"t",
"aisecurity"
],
[
"t",
"ai"
],
[
"proxy",
"https://infosec.exchange/@securestep9/116884683751982510",
"web"
],
[
"t",
"gitlost"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/116884683751982510",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/116884683751982510",
"pink.momostr"
],
[
"-"
]
],
"content": "#AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost:\n\n#AISecurity\n 👇\nhttps://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/",
"sig": "ee75f6c15539bef2437cad26cb051dd53beceb38e5fb850c8dd24ec384e7f24a8dab31c213934853202e697b7e895bdda02d2175a3aa538bae78bb2951442a0a"
}