Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code. Legit Security has detailed a vulnerability in the GitHub Copilot Chat AI assistant that ...
Hidden comments in pull requests analyzed by Copilot Chat leaked AWS keys from users’ private repositories, demonstrating yet another way prompt injection attacks can unfold.