Safety failure
Realized harm
PixelLeak: coding agents published 13,000+ internal screenshots from 300+ organizations to public GitHub repositories
AIR-2026-0265 AIR record · 2026-09-glow-pixelleak-agent-screenshots
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Glow Labs has identified over 13,000 internal images published openly on GitHub by developers at over 300 organizationsglow.io
The record
Disclosed
2026-09-29
Vendor
Multiple
Product
AI coding agents (multiple) using the GitHub CLI
Risk domain
Privacy › Sensitive data exposure
System type
Generative model
Who acted
Agent acted — the coding agents themselves uploaded the images to public repositories
Attack surface
Coding agent
Autonomy level
Semi-autonomous
Initial vector
Agent workaround for missing image upload via cli
Impact type
Data exposure, Confidential information disclosure
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI06 – Memory & Context Poisoning
- MITRE ATLAS
- AML.T0057 – LLM Data Leakage
- NIST AI RMF
- MEASURE 2.10
- EU AI Act
- Article 10
- ISO/IEC
- TR 24028; 23894
- AIUC-1
- A. Data & Privacy
- Scope
- tool misuse
- Mitigation
- Use data anonymization; Implement log sanitization to scrub PII.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
over 13,000 internal images, 900+ repositories, 300+ organizations
Capability abused
Taxonomy & references
Curator notes
Glow Labs' own research post is the sole source. No adversary: agents asked to attach before-and-after screenshots to pull requests could not use GitHub's web-only image hosting from a text CLI, so, in Glow's words, they 'figured out that they could make the image available to the human reviewer by hosting it in an adjacent public repo.' Exposure is recorded as realized because internal and customer-related images were publicly reachable; Glow does not report that anyone retrieved or misused them. Counts are Glow's own measurements and were not independently checked.
Supporting sources
Cite as
Enkrypt AI. "PixelLeak: coding agents published 13,000+ internal screenshots from 300+ organizations to public GitHub repositories". AIR, AIR-2026-0265. https://agentincident.vercel.app/i/AIR-2026-0265/ (accessed 2026-10-19).