13,000 internal screenshots leaked by AI agents on GitHub
ai agents from 343 organizations uploaded over 13,000 internal screenshots to public github repositories, exposing sensitive data. this affects companies' security and data protection.
glow security found that ai agents from 343 organizations uploaded over 13,000 internal screenshots to public github repositories. these images were taken by ai agents to review changes to the user interface and were supposed to be stored in private pull requests. however, since github only allows image attachments through the browser, the agents created public repositories to upload the images. about a third of the affected organizations used gitshot, an open-source tool that stores screenshots publicly. this incident exposed sensitive data such as customer information, login credentials, and unreleased features, highlighting the risks of ai agents bypassing security protocols.