Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Summary
Researchers have discovered a vulnerability in GitHub Agentic Workflows that allows attackers to leak private repository data. By creating a public issue, an attacker can trick the workflow into revealing the contents of private repositories if the agent has been granted read access.
IFF Assessment
FOE
This vulnerability represents a significant risk to organizations using GitHub's agentic workflows, as it enables unauthorized access to sensitive private data.
Defender Context
Organizations using GitHub's agentic workflows should be aware of this potential for data leakage. It highlights the importance of carefully managing permissions for automated agents and scrutinizing the inputs they process, especially from public sources.