Public GitHub Issues Can Leak Private Repo Data via Agentic Workflows

Noma Security researchers show that a public issue on a GitHub repo can trick Agentic Workflows into leaking private repository data. No credentials or special access are needed—only a crafted issue.