Researchers disclose prompt injection vulnerability in GitHub Agentic Workflows leaking private repositories

Researchers at Noma Security disclosed that GitHub's preview Agentic Workflows feature can be manipulated via prompt injection to retrieve and publish private repository content publicly. The vulnerability was demonstrated through prompt injection attacks that bypassed access controls, exposing a core risk as enterprises adopt autonomous agents with repository permissions. GitHub has not yet published a disclosed patch timeline.