2025-06 · 2025-Q2
GitHub Copilot CamoLeak
Layer tags: not yet tagged.
Target
GitHub Copilot Chat
Impact
Silent exfiltration of AWS keys, security tokens, and zero-day details from private repos; CVSS 9.6
Root Cause
Copilot parsed invisible markdown comments; data exfiltrated via GitHub Camo proxy image requests