PromptPwnd is a threat campaign tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed December 5, 2025; most recent activity December 6, 2025.
PromptPwnd is a threat campaign name used to describe prompt-injection attacks targeting AI-enabled tooling within CI/CD pipelines. Reported activity shows adversaries (or researchers demonstrating the technique) injecting crafted prompts into GitHub Actions workflows to influence the Google Gemini CLI, illustrating how AI-assisted development tools can be manipulated in automated software delivery. This highlights a critical attack surface where prompt security and tool guardrails in CI/CD are essential to protect data and pipeline integrity.
Researchers have identified a critical vulnerability class named 'PromptPwnd' that affects AI agents in GitHub Actions and GitLab CI/CD pipelines. This vulnerability allows attackers to inject malicious prompts through…