'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

Reddit r/AI_Agents 07/12/26, 05:35 PM Papers

prompt-injection security ai-agents code-review image-attack red-team

Summary

Researchers demonstrate a new prompt injection attack where malicious instructions hidden in images bypass AI code reviewers and cause coding agents to leak repository secrets.

Researchers have built a pull request that steals a repository's secrets by hiding the malicious instruction inside a PNG that AI code reviewers never open. The reviewer waves the change through. Later, a coding agent reads the picture, opens the repo's .env, and writes every key into the source as a harmless-looking list of numbers.

Original Article

Similar Articles

Inside Ghostcommit: How Malicious PNGs Bypass AI Code Reviewers

Reddit r/artificial

Ghostcommit is a novel supply chain exploit that uses malicious PNG images containing text instructions to bypass AI code reviewers, leading to data exfiltration from developer environments.

Understanding prompt injections: a frontier security challenge

OpenAI Blog

OpenAI publishes guidance on prompt injection attacks, a social engineering vulnerability where malicious instructions hidden in web content or documents can trick AI models into unintended actions. The company outlines its multi-layered defense strategy including instruction hierarchy research, automated red-teaming, and AI-powered monitoring systems.

Prompt Injection Attacks Are Thwarting AI Hacking Agents

Wired

Researchers from Tracebit have developed 'context bombing,' a technique that uses prompt injections placed alongside sensitive data to trigger refusal mechanisms in AI hacking agents, significantly reducing the success rate of attacks.

Now, defenders are embracing the prompt injection, too

Ars Technica

Tracebit introduces 'context bombing,' a technique that uses prompt injections as defensive decoys to halt AI hacking agents, reducing admin compromise from 57% to 5% across tests with leading LLMs.

Prompt injection took down a production agent last week — here's what our post-mortem found

Reddit r/AI_Agents

A production AI support agent was compromised via prompt injection, exposing other customers' data. The post-mortem revealed lack of enforcement layers, useless audit trails, and no kill switch, highlighting systemic security gaps in deploying AI agents.