Severity: HighVulnerabilityData exfiltration
Public Repository Issue Exploits GitHub Agentic Workflows to Exfiltrate Private Repository Contents
Global
Live intelligence. Items are aggregated from public sources and summarised automatically. Always verify against the linked source before acting.
A vulnerability in GitHub Agentic Workflows allows an attacker to create a public issue in any repository to trick the workflow into accessing and leaking the contents of private repositories within the same organization. The attack requires no stolen credentials or direct access—only that the organization has configured the agent with read permissions across its repository scope.
What to do
Restrict agentic workflow read permissions to only those repositories explicitly required, and implement pull-request approval gates for external contributions.
Mapped framework pillars
Sources
#GitHub Actions#agentic workflows#repository access#privilege abuse#data leakage