GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.