{
 "type": "bundle",
 "id": "bundle--2ce2ff41-0c16-5775-a4a2-17d1e4964fa5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--a6c651cd-52c6-555d-b63e-214532ce5565",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "CamoLeak: a hidden pull-request comment makes GitHub Copilot Chat leak private source",
   "description": "An invisible comment in a pull request instructs Copilot Chat to encode private repository content as a sequence of image requests through GitHub's Camo image proxy, exfiltrating source and secrets the victim can access. CVSS 9.6. GitHub disabled image rendering in Copilot Chat.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-003",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-003/"
    },
    {
     "source_name": "Legit Security",
     "url": "https://legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code",
     "description": "CamoLeak: critical GitHub Copilot vulnerability leaks private source code"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--a5d83c0d-b908-5865-bd98-a42d01184025",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "Security researchers (Legit Security), proof of concept",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--c55c8425-c144-50bd-a5f4-34cdd1fc2005",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "GitHub — disabled image rendering in Copilot Chat",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--2fd43ad1-2f98-5a5d-8fcc-ea593f806a95",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--7b2446a9-a3c0-5e4d-abac-e6516328aef5",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--59c06095-8d30-5c4d-89f8-80fd3d480c85",
   "created": "2025-10-08T00:00:00.000Z",
   "modified": "2025-10-08T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}