// GitHubHIGH
Security researchers disclosed a Cryptographic Context Injection (CCI) vulnerability in GitHub Copilot CLI enabling attackers to steal developer secrets through encrypted prompt injection via attacker-controlled webpages. Demonstrated extraction of sensitive files like `.env.prod` in 28 seconds when autopilot mode is enabled. Adversa AI reported the issue to GitHub's bug bounty program on September 17, 2026; GitHub acknowledged the behavior but declined to classify it as a vulnerability or grant bounty eligibility.
- GitHub Copilot CLI Flaw Lets Attackers Steal Developer Secrets U(opens in a new tab)
- GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer (opens in a new tab)
// Get alerts for GitHub