Threat
GitHub Copilot CLI vulnerability leaks developer secrets
Publication date unknown · Discovered adversa.ai
Page published
Publication date unknown · First observed: 9 Nov 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
Cryptographic Context Injection can turn a routine Copilot CLI page-reading task into secret exfiltration by laundering attacker instructions through decrypted shell output that the agent treats as trusted.
Adversa AI demonstrated Cryptographic Context Injection against GitHub Copilot CLI in autopilot mode: an attacker-controlled page induces the agent to decrypt hidden instructions in its shell, read local files, and exfiltrate their contents. The demonstration stole a .env.prod file in about 28 seconds on one offered model, while two others rejected the identical payload. The researchers report that GitHub validated the finding but declined to classify it as a vulnerability.