GitLost: How AI Agents Can Leak Your Code Through a Single GitHub Issue
# GitLost: How AI Agents Can Leak Your Code Through a Single GitHub Issue A public GitHub issue should not be able to pull text out of your private repositories. With a dangerously over-permissioned GitHub Agentic Workflow, that is exactly what Noma Labs demonstrated. Their July 2026 write-up sho…