GitHub Copilot Chat Prompt Injection to Data Exfiltration
Date: 2024-06
Affected: GitHub Copilot Chat
Attack vector: data-exfiltration
Category: research
Severity: High

Rehberger demonstrated indirect prompt injection in GitHub Copilot Chat through repository content, leading to data exfiltration of secrets and code via markdown image rendering.


Mitigations:

Architectural layers (MAESTRO):