Back Ground.News

Over 250,000 Potential Security Issues Uncovered in GitHub Actions Workflows

Ground.News • July 7, 2026

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access to the organization. If that organization has given the agent read access across its repositories, private ones

Researchers at artificial intelligence security company Noma Security Inc. today disclosed a critical prompt injection vulnerability in GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code repositories by posting a single crafted issue in a public one. Named GitLost, the vulnerability was found by Noma Labs, the […] The post ‘GitLost’ vulnerability let GitHub’s AI workflows leak pr…

Kaspersky’s Global Research and Analysis Team (GReAT) has identified widespread security misconfigurations in GitHub Actions workflows after analysing more than... Source

Kaspersky’s Global Research and Analysis Team has conducted a major review of the GitHub Actions workflows within top-starred repositories. Leveraging newly introduced Kaspersky Container Security capability, the researchers have discovered 8 repositories with critical misconfigurations that could lead to supply chain compromise. Open-source components are now indispensable to modern software engineering. However, they also introduce hidden vect…

Kaspersky’s Global Research and Analysis Team (GReAT) has conducted a major review of the GitHub Actions workflows within top-starred repositories. Leveraging newly introduced Kaspersky Container Security capability, the researchers have discovered 8 repositories with critical misconfigurations that could lead to supply chain compromise. Open-source components are now indispensable to modern software engineering. However, they also introduce hid…

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New GitHub Exploit Allows AI Coding Agents to Execute Malicious Payloads Researchers from Mozilla's 0DIN have demonstrated a new attack vector that allows AI coding agents, specifically Anthropic's Claude Code, to execute malicious payloads from seemingly benign GitHub repositories. The attack exploits the agent's automated error recovery process, where it runs initialization commands without human oversight. This method involves three steps: a Python package requiring initialization, a command that runs a script, and a DNS TXT record controlled by the attacker that retrieves and executes a payload. Notably, no malicious code exists in the cloned repository, making detection by security scanners and human reviewers nearly impossible. The attack grants the attacker a shell with the developer's privileges, allowing access to sensitive data such as environment variables and API keys. Although currently a proof-of-concept, the method poses a significant risk to developers using automated coding tools. The researchers recommend treating automated initialization steps as untrusted execution and implementing explicit human approval gates. No active exploitation has been reported yet. 67 sources 62

Extracted Entities

Over 250,000 Potential Security Issues Uncovered in GitHub Actions Workflows

The full story

Extracted Entities

Attack Types (2)

Companies (3)

MITRE ATT&CK (1)

Tools (1)

Vulnerabilities (1)