#GITHUB_TOKEN

1 article

RoguePilot Vulnerability: GitHub Codespaces GITHUB_TOKEN Leak

Orca Security researchers discovered RoguePilot, a flaw in GitHub Codespaces allowing attackers to steal GITHUB_TOKENs through indirect prompt injection.

Runtime Rebel Intel

4 min read·Feb 24, 2026