Case wiz-red-agent-snowflake-jiraAI supply chainUnited States
Wiz Red Agent reaches Snowflake's internal Jira via GitHub Actions flaw in Copilot-assisted PR
Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a GitHub Copilot-assisted PR, validated access to sensitive data in Snowflake's internal Jira and assessed blast radius without human help.
MediumAttack using AIStatus: UnresolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 14, 2026
- Location
- United States
- Target
- Snowflake internal Jira and GitHub Actions workflow
- Severity
- Medium
- Triggered by
- Wiz Red Agent (autonomous AI attacker)
- Actor type
- Security researchers
- Reported loss
- None reported
- CVE
- None
What happened
Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a GitHub Copilot-assisted PR, validated access to sensitive data in Snowflake's internal Jira and assessed blast radius without human help.
Impact: Validated access to sensitive data in Snowflake's internal Jira; blast radius assessed by the agent.
Who triggered it
Actor: Wiz Red Agent (autonomous AI attacker)
Attribution: Reported by Wiz Research as its own Red Agent; the flaw was missed by GitHub's Advanced Security.
Motive: Security research and demonstration of the Red Agent product.
How it happened
Attack vector: GitHub Actions injection in a workflow tied to a GitHub Copilot-assisted pull request.
Root cause: Injectable GitHub Actions workflow that GitHub Advanced Security did not flag, live for five days before exploitation.
Timeline
- Reported by Wiz Research
Response
Unknown
Current status: Unresolved
Sources (open in a new tab)
- Wiz Research wiz.io
Cite this case
Wiz Red Agent reaches Snowflake's internal Jira via GitHub Actions flaw in Copilot-assisted PR. AI Threat Watch, case wiz-red-agent-snowflake-jira, Oct 14, 2026. https://aithreat.io/cases/wiz-red-agent-snowflake-jira/
Permanent link: https://aithreat.io/cases/wiz-red-agent-snowflake-jira/