GitHub AI agent leaks private repos when asked nicely

Noma Labs discovered 'GitLost', a critical prompt-injection flaw in GitHub's Agentic Workflows allowing AI agents (e.g., Claude or GitHub Copilot) to be manipulated via a crafted public issue so they fetch and post files from private repositories as public comments; researchers published PoC and workflow reproductions while GitHub had not applied the proposed documentation mitigation, leaving organizations using Agentic Workflows at risk of silent data exfiltration.