Claude 4 and GitHub MCP will leak your private GitHub repositories

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by Aurornis on Monday May 26, 2025 @05:39PM (#44101927)

We had a bug bounty program manager who didn’t screen reports before sending them to each team as urgent tickets.

80% of the tickets were exactly like you said: “If the attacker could get X, then they can also do Y” where “getting X” was often equivalent to getting root on the system. Getting root was left as an exercise to the reader.

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by stzsch on Tuesday May 27, 2025 @08:43AM (#44106391)

Or as Raymond Chen likes to put it: "It rather involved being on the other side of this airtight hatchway".

https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...

(actually a hitchhiker's guide to the galaxy quote, but I digress)

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by LelouBil on Wednesday May 28, 2025 @02:34PM (#44119157)

I'm 100% gonna be reusing the "unlocking windows from the inside" analogy

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by monkeyelite on Tuesday May 27, 2025 @10:07AM (#44107173)

Security teams themselves make these reports all the time. Internal tools do not have the same vulnerabilities as systems which operate on external data.

[ Parent | on HN ]