Technology ❯ Software Development ❯ Open Source Software ❯ GitHub
The flaw let a public triage agent be prompt‑injected to call a maintainer‑level agent, exposing tokens and enabling code execution on CI runners that could taint downstream builds.