Back Cybersecuritynews

GitHub Copilot Exploited to Perform Full Repository Takeover via Passive Prompt Injection

Cybersecuritynews •Guru Baran • February 25, 2026

A critical AI-driven vulnerability in GitHub Codespaces, dubbed RoguePilot, that enabled attackers to silently hijack a repository by embedding malicious instructions inside a GitHub Issue. The flaw, uncovered by researchers at the Orca Research Pod, exploits the seamless integration between GitHub Issues and the in-Codespaces Copilot AI agent, requiring no direct interaction from the attacker […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitHub Copilot Attack Exploits Issues for Repository Takeover A cybersecurity incident has emerged where attackers exploited GitHub Issues to inject malicious instructions that are processed by Copilot during the launch of a Codespace. This attack leverages the zero-day vulnerability CVE-2026-22769, which was recently exploited by a Chinese cyberespionage group. Affected users may face repository takeovers due to this exploitation. 3 sources 35

Extracted Entities

GitHub Copilot Exploited to Perform Full Repository Takeover via Passive Prompt Injection

The full story

Extracted Entities

Companies (1)

Platforms (2)

Tools (1)

Vulnerabilities (1)