Security researchers at Noma Labs discovered a critical prompt injection vulnerability named GitLost within GitHub's new Agentic Workflows. This flaw enables unauthenticated attackers to silently extract data from private repositories by posting a specially crafted issue in a public repository belonging to the same organization.