CamoLeak (CVE-2025-59145) prompt injection leaks private code via GitHub Copilot Chat
Date: 2025-06
Affected: GitHub Copilot Chat
Attack vector: prompt-injection
Category: real-world
Severity: Critical

Legit Security disclosed CamoLeak (CVSS 9.6) in GitHub Copilot Chat: invisible Markdown comments in pull requests caused Copilot to leak secrets and source code from private repos. CSP bypass used GitHub's own Camo image proxy. GitHub mitigated by disabling Copilot Chat image rendering.


Mitigations:

Architectural layers (MAESTRO):