GitHub Agentic Workflow Bug Leaks Private Repo Data

A flaw in GitHub's agentic workflows, dubbed 'GitLost,' lets unauthenticated attackers exfiltrate data from private repositories by crafting a malicious issue in a public repo. The vulnerability exploits the trust between public and private repos in automated workflows. GitHub has not yet released a patch.