Public GitHub Issue Can Leak Private Repo Data via Agentic Workflows

Researchers at Noma Security demonstrated that a public GitHub issue can trick GitHub Agentic Workflows into leaking private repository contents. The attack requires no stolen credentials, only an issue on a public repo. It works if the organization granted the agent read access across its repositories.