Evidence · DiggingBeagle record
Advisory: GitHub Agentic Workflows misroutes Copilot bearer token to OpenAI and leaks partial token in public artifact
GitHub Agentic Workflows mapped a Copilot GitHub credential into an OpenAI-style environment variable for some external engines. The provider adapter then sent the credential to an unexpected API endpoint. GHSA-vc9g-q5h8-x44c reports full-token transmission to genuine OpenAI and partial token fragments in generated error artifacts. Sending to OpenAI is not evidence that an attacker controlled the destination or possessed the full token. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
GitHub Agentic Workflows mapped a Copilot GitHub credential into an OpenAI-style environment variable for some external engines. The provider adapter then sent the credential to an unexpected API endpoint. GHSA-vc9g-q5h8-x44c reports full-token transmission to genuine OpenAI and partial token fragments in generated error artifacts. Sending to OpenAI is not evidence that an attacker controlled the destination or possessed the full token. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsGitHub Agentic Workflows sent Copilot credentials to an unintended AI provider: GHSA-vc9g-q5h8-x44c reports full-token transmission to genuine OpenAI and partial token fragments in generated error artifacts. Sending to OpenAI is not evidence that an attacker controlled the destination or possessed the full token.
GHSA-vc9g-q5h8-x44c; universal-llm-consumer mapping and upstream error artifact
- supportsGitHub Agentic Workflows sent Copilot credentials to an unintended AI provider: GitHub Agentic Workflows mapped a Copilot GitHub credential into an OpenAI-style environment variable for some external engines. The provider adapter then sent the credential to an unexpected API endpoint.
GHSA-vc9g-q5h8-x44c; universal-llm-consumer mapping and upstream error artifact
- supportsGitHub Agentic Workflows sent Copilot credentials to an unintended AI provider: The GitHub Agentic Workflows advisory traces the Copilot credential into an OpenAI adapter which sent it to the real OpenAI models API; error artifacts could expose a token prefix and suffix, not necessarily a complete bearer token to a public reader.
GHSA-vc9g-q5h8-x44c: provider token mapping and upstream-errors.jsonl