Re:GitLost: We Tricked GitHub's AI Agent into Leaking Privat...
by trhway on Wednesday July 08, 2026 @05:42AM
(#48829788)
If you expose your private database's raw SQL access to public web, i bet people will find a way.
The same way here, i see the main issue isn't prompt injection, it is publicly accessible agent having access to private repos. What is the important use case for such a config that it warrants such basic security violation?
The same way here, i see the main issue isn't prompt injection, it is publicly accessible agent having access to private repos. What is the important use case for such a config that it warrants such basic security violation?