Skip to content
The blog

Written after the deployment, not before.

Essays on AI architecture, strategy and the org problems in between. Heart what’s useful, argue with me in the comments.

Tagged gitlostclear ✕


Aug 07, 2026

gitlost13 min read

GitLost: How a GitHub AI Agent Leaked Private Repos from One Public Issue

Security researchers discovered "GitLost," a vulnerability where a GitHub AI agent was tricked by a malicious prompt in a public issue into leaking data from private repositories, highlighting a fundamental security flaw in agentic AI systems.

A key with a maze-shaped head lying inside an open lock box.

2 reads