AI-Generated GitHub Copilot "Autofix" Allowed Compromise of Snowflake's Jira
An AI-powered security tool discovered a critical vulnerability in a Snowflake repository that was inadvertently introduced by GitHub Copilot's 'Autofix' feature. The AI replaced secure input sanitization with a flawed script that allowed for command injection.
Why it matters
This incident highlights the security risks associated with relying on AI coding assistants to automatically modify production code without rigorous human oversight.
As part of ongoing security research conducted through Snowflake’s HackerOne vulnerability disclosure program, Wiz Research’s "Red Agent"—an autonomous, AI-powered security research tool—identified a critical GitHub Actions workflow vulnerability in one of Snowflake’s public repositories.
This incident highlights a rapidly emerging reality in software development: how AI coding assistants can inadvertently introduce workflow injection vulnerabilities, and how automated AI agents can rapidly surface them in the wild.
Upon responsible disclosure on June 23, 2026 by Wiz, Snowflake remediated the vulnerability on the same day, rotated the affected credential, and verified via detailed audit logs that Wiz was the sole actor during the exposure window. Wiz confirmed that all data accessed during proof-of-concept testing was securely deleted.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in