Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

GitHub Copilot Flaw Allows Attackers to Steal Source Code from Private Repositories

A vulnerability in GitHub Copilot Chat, identified in June 2025, exposed private source code and sensitive information. This security flaw, rated CVSS 9.6, involved a Content Security Policy bypass combined with remote prompt injection.

IBy Iris EmersonOct 10, 20251 min read

A vulnerability in GitHub Copilot Chat, identified in June 2025, exposed private source code and sensitive information. This security flaw, rated CVSS 9.6, involved a Content Security Policy bypass combined with remote prompt injection.

GitHub Copilot Chat, an AI assistant integrated into GitHub, assists developers by providing code explanations and suggestions. The tool accesses repository contents, necessitating secure handling of sensitive data. The vulnerability allowed attackers to inject instructions into pull request descriptions using invisible comments, a documented GitHub feature, influencing Copilot's actions.

The exploit involved embedding a hidden comment with a malicious prompt in a pull request description. Although not visible in the web interface, GitHub processed this comment, enabling Copilot to execute hidden instructions with the viewer's permissions.

Initial tests included simple messages, but researchers escalated to full command sets that searched for secrets, encoded files, and exfiltrated data via image URLs. While GitHub's Content Security Policy blocks external images, it reprocesses third-party URLs through its Camo proxy, appending an HMAC signature.

A vulnerability in GitHub Copilot Chat, identified in June 2025, exposed private source code and sensitive information.
Iris Emerson · Thehackingpost

Researchers pre-generated a dictionary of Camo URLs for each character and symbol. Copilot reconstructed exfiltration URLs at runtime, using these URLs to deliver private code in transparent 1×1 pixels to an attacker's server.

After the report, GitHub disabled image rendering in Copilot Chat to prevent the Camo bypass. A patch was released on Mon, Aug 14, 2025, removing the capability to process Markdown image tags, thereby closing the CSP bypass and remote prompt injection vector.

Advertisement

Developers are advised to update their Copilot Chat integrations and monitor pull requests for unusual hidden content to protect against similar threats.

Based on reporting by GBHackers.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026