GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

News Companies Events

Statistics About NLC Contact us

News Companies Events

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Image for the article: GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Tue Jul 07 2026

Open Source

Vulnerability

hackread.com

Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.