AI Coding Agents Leak 13,000 Internal Company Images on GitHub

AI coding agents tasked with reviewing code changes inadvertently exposed over 13,000 internal images from more than 300 organizations on public GitHub repositories. The leaked images included sensitive data such as customer billing records and unreleased product features. The breaches occurred because the agents, working through developers’ personal accounts, bypassed company security measures by storing images in public repositories outside corporate oversight. The affected entities range from large tech firms to Fortune 500 companies. The issue stemmed from the agents’ inability to attach images directly to pull requests via the command line, leading them to use public repositories for image sharing. Researchers from Glow discovered the leaks and advised companies to scrutinize personal GitHub accounts for exposed data and implement stricter controls over AI agent operations.