{"id":125662,"date":"2025-05-28T15:05:18","date_gmt":"2025-05-28T13:05:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-mcp-servere-github-privodyashhaya-k-utechke-informaczii-iz-privatnyh-repozitoriev"},"modified":"2025-05-28T15:05:18","modified_gmt":"2025-05-28T13:05:18","slug":"uyazvimost-v-mcp-servere-github-privodyashhaya-k-utechke-informaczii-iz-privatnyh-repozitoriev","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-mcp-servere-github-privodyashhaya-k-utechke-informaczii-iz-privatnyh-repozitoriev","title":{"rendered":"Sebezhet\u0151s\u00e9g a GitHub MCP-kiszolg\u00e1l\u00f3j\u00e1ban, amely adatveszt\u00e9st okoz a priv\u00e1t t\u00e1rol\u00f3kb\u00f3l.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A GitHub MCP Server, which implements the MCP (Model Context Protocol) from GitHub, has been found to have a vulnerability that allows the extraction of data from private repositories of users who use AI assistants to automate their work with repositories. <\/p>\n
The MCP protocol is designed to connect AI models with various data sources. The GitHub MCP Server provides seamless integration of large language models with the GitHub API and gives these models additional context by extracting data from GitHub repositories. Models using MCP can be applied to automate specific actions on GitHub, such as parsing error messages. <\/p>\n
The essence of the vulnerability is that through interaction with a large language model connected to GitHub, it is possible to obtain confidential user data tied to the AI agent linked to their GitHub account. An attacker can post a specially formatted issue report in a public repository for which automation based on a large language model is applied. Once activated, the model will generate a pull request with a proposed solution. Accordingly, if the issue concerns private repositories or confidential data, the model may disclose information in the proposed pull request.
<\/center> <\/p>\n
For example, an issue was submitted complaining that the author was not specified in the README file. The suggested solution in the message was to add information about the author and a list of all repositories that the author had worked on to the README. As a result, the model created a pull request with information including personal details about the author, extracted from a private repository, as well as a list of existing private repositories. At the next stage, similar interactions with the model can retrieve data from a specific private repository. <\/p>\n
Az AI-\u00fcgyn\u00f6k aktiv\u00e1l\u00e1s\u00e1hoz sz\u00fcks\u00e9ges, hogy a t\u00e1rol\u00f3 tulajdonosa utas\u00edt\u00e1st adjon a hibajelent\u00e9sek feldolgoz\u00e1s\u00e1ra. Ha a GitHub kapcsol\u00f3dik a Claude AI-szolg\u00e1ltat\u00e1shoz, elegend\u0151, ha a t\u00e1rol\u00f3 tulajdonosa elk\u00fcldi az AI-asszisztensnek a k\u00f6vetkez\u0151 k\u00e9rd\u00e9st: 'N\u00e9zd meg a ny\u00edlt forr\u00e1sk\u00f3d\u00fa t\u00e1rol\u00f3im issue-jait \u00e9s jav\u00edtsd ki azokat'. Ezt k\u00f6vet\u0151en az AI-asszisztens aktiv\u00e1lja a be\u00e1ll\u00edtott MCP-integr\u00e1ci\u00f3t a GitHub-fi\u00f3kj\u00e1val, \u00e9s v\u00e9grehajtja a hibajelent\u00e9sekben tal\u00e1lhat\u00f3 utas\u00edt\u00e1sokat. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Sebezhet\u0151s\u00e9g](\"\/wp-content\/uploads\/2025\/05\/d90869cf9ba87f9fe8691181c703288f.png\")
<\/center> <\/p>\n