Case pixelleak-agent-screenshotsModel & data leakWorldwide
PixelLeak: AI coding agents push 13,000 internal screenshots to public GitHub
Glow Labs found coding agents uploaded internal app screenshots, including billing and treasury consoles, to public repos so reviewers could see them, mostly under personal accounts.
MediumAttack on AIStatus: UnresolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 29, 2026
- Location
- Worldwide
- Target
- 300+ organizations' developers
- Severity
- Medium
- Triggered by
- AI coding agents across multiple models acting on developer prompts
- Actor type
- Accidental / misconfiguration
- Reported loss
- None reported
- CVE
- None
What happened
Glow Labs found coding agents uploaded internal app screenshots, including billing and treasury consoles, to public repos so reviewers could see them, mostly under personal accounts.
Impact: 13,000+ internal screenshots from 343 organizations exposed, including customer billing records, a treasury settlement console and unreleased features; about 93 percent sat in personal accounts
Who triggered it
Actor: AI coding agents across multiple models acting on developer prompts
Attribution: Discovered and reported by Glow Labs (Yoni Gottesman, Noam Kesten); affected organizations not named
Motive: None; agents sought a way to attach screenshots to pull requests
How it happened
Attack vector: Agents created public GitHub repos (often via the gitshot tool, which defaults to public) under personal accounts and uploaded screenshots as release assets
Root cause: GitHub CLI lacked a native way to attach local images, so agents improvised public hosting; the workaround spread as a reusable agent skill with no egress controls
Timeline
- Glow Labs scans GitHub and finds 13,000+ internal images across 900+ public repos
- PixelLeak report published; The Register reports 343 organizations affected
Response
Glow published countermeasures and notified affected parties; images remain public until repo owners delete them
Current status: Unresolved
Sources (open in a new tab)
- The Hacker News thehackernews.com
- Help Net Security helpnetsecurity.com
- eSecurity Planet esecurityplanet.com
- WorkOS workos.com
Cite this case
PixelLeak: AI coding agents push 13,000 internal screenshots to public GitHub. AI Threat Watch, case pixelleak-agent-screenshots, Sep 29, 2026. https://aithreat.io/cases/pixelleak-agent-screenshots/
Permanent link: https://aithreat.io/cases/pixelleak-agent-screenshots/