1. Sebastien Gioria Oct 19, 2026
   

   Vulnerability

   According to Adversa AI, a booby-trapped encrypted text is enough to make GitHub Copilot CLI steal a .env.prod file.

   • The agent decrypts the text in its own execution environment, then treats the result as trusted context.

   • The theft and exfiltration to an attacker's server take 28 seconds, in autopilot mode with a permissive model.

   • The mai-code-1.1-flash model carries the chain through to the end in 50% of trials, according to Adversa AI.

   • Reported on September 17, the finding was confirmed by GitHub but not classified as a vulnerability, with no CVE and no fix.

   Read the original article Copilot CLI : un texte chiffré suffit à lui faire voler votre .env, et GitHub n'y voit pas une faille blog.gioria.org

Back to the weekBack to the month