Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

Researchers at Noma Security have found a vulnerability that can cause GitHub Agentic Workflows to leak private repository data. This can be achieved by creating a public issue on a public repository, which does not require any stolen credentials or access to the targeted organization. The attack relies on the organization having granted the agent read access to all its repositories, including private ones. By opening a normal-looking issue, an attacker can potentially expose the contents of these private repositories. The vulnerability does not require any special access or credentials, making it a relatively simple attack to execute.