en.Wedoany.com Reported - Microsoft researchers have discovered a vulnerability in the GitHub automation workflow of Anthropic's Claude Code that could lead to the leakage of confidential information in continuous integration/continuous deployment workflows, allowing attackers to steal sensitive credentials through prompt injection attacks.

Microsoft's threat intelligence team initiated this research after detecting attempts at prompt injection targeting AI-assisted GitHub workflows in public code repositories. Prompt injection is a type of AI security vulnerability where attackers embed misleading instructions in content processed by large language models, manipulating the model's behavior to disregard preset instructions. Researchers cited an example where an attacker hid injection instructions within HTML comments, which are invisible in the GitHub display interface but can be recognized by AI models reading the raw Markdown source code. The code repository at that time used GitHub automation workflows to automatically handle issue tickets.

Attackers can disguise malicious instructions as ordinary feature requests. Without needing project modification permissions, they only need to submit a GitHub issue to trick the AI bot into performing modification operations on their behalf. Microsoft confirmed that similar prompt injection methods can also target Anthropic's Claude Code GitHub automation workflows. Previously, Anthropic had set up sandbox protections for some tools, but Microsoft found that the read tool used by Claude for reading files was not subject to the same security restrictions. Researchers created a prompt injection attack payload for verification testing. In the test, the malicious prompt successfully bypassed two layers of protection, inducing the AI assistant to read system files containing API keys and other credentials.

This article is compiled by Wedoany. All AI citations must indicate the source as "Wedoany". If there is any infringement or other issues, please notify us promptly, and we will modify or delete it accordingly. Email: news@wedoany.com