GitHub AI代理通过GitLost提示注入漏洞泄露私有仓库

报道来源 [14]

1. Hacker News — AI stories ≥50 points TIER_1 English(EN) · ColinEberhardt · 2026-07-08 05:25

   GitLost：我们诱骗GitHub的AI代理泄露了私有代码库

2. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] · 2026-07-09 05:08

   GitLost：我们如何欺骗 GitHub 的 AI 代理泄露私有仓库 - Noma Security # leak # ai # breach # dataprivacy https:// noma.security/blog/gitlost-how

   GitLost: How We Tricked GitHub's AI Agent into Leaking Private Repos - Noma Security # leak # ai # breach # dataprivacy https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos/

   链接 noma.security/…/gitlost-how-we-tricked-gi…
3. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] · 2026-07-08 16:25

   GitHub AI 代理被哄骗后泄露私有代码库

   GitHub AI agent leaks private repos when asked nicely https://www. theregister.com/security/2026/ 07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924 # github # ai

   链接 theregister.com/…/5267924
4. Mastodon — sigmoid.social TIER_1 中文(ZH) · [email protected] · 2026-07-08 07:17

   🌗 GitLost：我们如何诱骗GitHub的AI代理泄露私有存储库数据 ➤ 当AI代理成为内部威胁：分析GitLost漏洞的技术危险 ✤ https:// noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-priv

   🌗 GitLost：我們如何誘騙 GitHub AI 代理洩露私人儲存庫資料 ➤ 當 AI 代理成為內鬼：解析 GitLost 漏洞的技術威脅 ✤ https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos/ Noma Labs 近期揭露了一項名為「GitLost」的重大漏洞，該漏洞針對 GitHub 新推出的「Agentic Workflows」（代理工作流）。研究人員發現，GitHub 的 AI 代理無法有效區分「系統指…

   链接 noma.security/…/gitlost-how-we-tricked-gi…
5. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] · 2026-07-08 06:45

   GitLost：我们诱骗 GitHub 的 AI 代理泄露了私有仓库 https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos

   GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos/ Comments: https:// news.ycombinator.com/item?id=4 8827858 # HackerNews # GitLost # GitHub # AI # Leaks # PrivateRepos …

   链接 noma.security/…/gitlost-how-we-tricked-gi…
6. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] · 2026-07-08 06:24

   GitLost：我们诱骗 GitHub 的 AI 代理泄露了私有仓库 https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos

   GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos/ # ai # github # security

   链接 noma.security/…/gitlost-how-we-tricked-gi…
7. The Register — AI TIER_1 English(EN) · 2026-07-07 19:49

   GitHub AI 代理被诱导泄露私有代码库

   Per usual, there's no fix - or even any documentation - for GitLost

8. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] · 2026-07-09 16:56

   GitLost prompt injection can leak GitHub private repos

   https:// winbuzzer.com/2026/07/09/gitlo st-prompt-injection-can-leak-github-private-repos-xcxwbn/ A look at GitLost, the GitHub Agentic Workflows prompt-injection case where public issue text, private repo access, and public comments collide. # AI # GitLost # GitHub # GitHubActio…

9. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] · 2026-07-08 21:23

   GitLost展示了一个公开的GitHub Issue，通过提示注入AI代理来窃取私有仓库数据。这不是一个bug；而是将非结构化文本视为良性内容的特性。

   GitLost showed a public GitHub Issue prompt-injecting an AI agent to exfiltrate private repo data. Not a bug; a feature of treating unstructured text as benign. Agents reading Issues/PRs execute embedded commands. LLMs are pattern matchers, not gatekeepers. You need an architectu…

10. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] · 2026-07-08 20:45

    今日份别信LLM的私密数据：# GitLost ：我们如何欺骗GitHub的AI代理泄露私有仓库 https:// noma.security/bl

    In today's episode of don't trust LLMs with your private data: # GitLost : How We Tricked GitHub's AI Agent Into Leaking Private Repos https:// noma.security/blog/gitlost-how -we-tricked-githubs-ai-agent-into-leaking-private-repos/ # llm # ai # cybersecurity # promptinjection # g…

    链接 noma.security/…/gitlost-how-we-tricked-gi…
11. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] · 2026-07-08 16:00

    🔑 GitHub AI 代理通过提示注入泄露私有存储库... 📝 提示注入...

    🔑 GitHub AI agent leaks private r... 📝 A prompt inject... https://www. csoonline.com/article/4194448/ github-ai-agent-leaks-private-repositories-via-prompt-injection-attack.html 📰 GitHub AI agent leaks private repositories via prompt injection attack | CSO Online # DevSecOps # AI…

    链接 csoonline.com/…/github-ai-agent-leaks-pri… csoonline.com/…/4194448
12. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] · 2026-07-08 14:04

    GitLost：我们如何诱骗 GitHub 的 AI 代理泄露私有仓库

    GitLost: How We Tricked GitHub's AI Agent into Leaking Private Repos https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/ # Security # AI # OpenSource

    链接 noma.security/…/gitlost-how-we-tricked-gi…
13. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] · 2026-07-07 20:01

    🔑 GitHub AI 代理被哄骗后泄露私有仓库 📝 恶意提示者可以轻易诱骗 GitHub 代理...

    🔑 GitHub AI agent leaks private repos when asked nicely 📝 Malicious prompters could easily trick GitHub agents into... https://www. theregister.com/security/2026/ 07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924 📰 www.theregister.com - Articles # DevSecOps # AI…

    链接 theregister.com/…/5267924
14. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] · 2026-07-07 13:14

    📣🚨 研究人员演示 #GitLost，一种提示注入漏洞，该漏洞通过精心制作的公开问题使 GitHub 的 AI 代理暴露私有仓库数据，并且

    📣🚨 Researchers demonstrate # GitLost , a prompt injection vulnerability that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures. Listen to this news: https:// hackread.com/gitlost-github-ai -agent-leaking-repository-data/ # GitHu…

    链接 hackread.com/gitlost-github-ai-agent-leak…