AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos
GitHub, AI coding agents
AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories. The exposed data included customer billing records and unreleased product features.
- first report
- 29 Sep 2026
- last update
- 29 Sep 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-09-29AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code RepositoriesAI Incident Database · incidentdatabase.ai/cite/1734
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- AI-enabled attack
- categories
- Data leak
- severity
- 4 · Confirmed real-world loss
- targets
- Enterprise deployment
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 29 Sep 2026 · first reported 29 Sep 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos https://gcdradar.vercel.app/incidents/ai-coding-agents-exposed-internal-images-and-data-on-public · AIR-2026-0377 · closed 2026-10-13 - Lane: Breaches & attacks - Severity: 4 (Confirmed real-world loss) - Fix status: No fix needed - First reported: 2026-09-29 - AI role: AI-enabled attack - Products: GitHub, AI coding agents ## Summary AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories. The exposed data included customer billing records and unreleased product features. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-09-29: AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories (https://incidentdatabase.ai/cite/1734) ## Sources - 2026-09-29 AI Incident Database: AI Coding Agents Reportedly Exposed Over 13,000 Internal Images from Hundreds of Organizations on Public GitHub Code Repositories https://incidentdatabase.ai/cite/1734 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedWarp agentic development environment Warp discloses breach exposing AI agent logs and telemetry data
Breaches & attacks · Exploited · since 27 Oct 2026
AI - closedmedical AI models Automated Screening of Privacy Risks in Medical AI
Research · since 23 Oct 2026
AI - closedGPT-5.6-Sol Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems
Research · since 23 Oct 2026
AI - closedAfterDeleteBench AfterDeleteBench: Auditing Post-Deletion Information Persistence in LLM Agents
Research · since 23 Oct 2026
AI - closedBlack-Box Red-Teaming of Multi-Agent Systems via Reinforcement Learning
Research · since 22 Oct 2026
AI - closedRAGLeak RAGLeak: Supply-Chain Privacy Backdoors in Retrieval-Augmented Generation
Research · since 20 Oct 2026
AI