AI developer toolsBriefPublic record
CamoLeak, GitHub Copilot Chat private-repo exfiltration
Legit Security. Hidden PR comments plus a Camo image-proxy alphabet leaked secrets and code.
- Disclosed
What happened
- Legit Security. Hidden PR comments plus a Camo image-proxy alphabet leaked secrets and code. GitHub fixed it on 14 Aug 2025 by disabling image rendering in Copilot Chat. CVSS 9.6.
- The CVE ID is given as CVE-2025-59145 by one secondary source only: UNVERIFIED.
Live scores
Live scores
CVE-2025-59145- EPSS
- 0.006
low predicted chance of attack - VEDAS
- 0.055
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.