Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

Artificial Intelligence

Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication.

By

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail

Related: Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

More from Ionut Arghire

Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks

Armored Likho APT Targeting Government, Electric Power Entities

North Korean Hackers Target Open Source Developers in Supply Chain Attacks

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

Agentic AI Used to Conduct Ransomware Attack via Langflow

Medtronic Data Breach Impacts 3.8 Million People

Alleged Scattered Spider Hacker Extradited to US

Latest News

County Government Reportedly Paid $1 Million to Cyber Extortion Group

Critical Gitea Flaw Under Active Exploitation, Researchers Warn

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Webinar: Why Email Security Keeps Failing (And What Has to Change)

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Virtual Event: 2026 Cloud Security Summit

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Sherrod DeGrippo has been appointed Head of Threat Intelligence for Palo Alto Networks Unit 42.

Christopher Porter has joined Booz Allen Hamilton as Global Chief Information Security Officer.

Yael Ben Arie has joined exposure validation company Pentera as Chief Product Officer.

The Shift Toward Business-Aligned Risk Management

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. (Steve Durbin)

How to Conduct a Successful Audit of AI-Driven Software Development

As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. (Matias Madou)

Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors

From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype. (Joshua Goldfarb)

The AI Token Costs That Can Break Cybersecurity

As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits. (Danelle Au)

When Information Becomes the Attack Surface – Understanding AI Agent Traps

From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI. (Etay Maor)

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail