GyaanSetu AI

AI, machine learning and LLM insights.

1515 articlesDeep, practical knowledge

Public GitHub Issue Lets AI Bot Leak Private Repo Code in One Click

Noma Labs demonstrated that an attacker can post a crafted issue in a public repo, trigger a CI-linked AI agent with read rights to private repos, and have the bot dump those files back to the issue—all without stealing credentials or exploiting GitHub itself.

AI · 2 min read