Agent report

GitHub Copilot failures

6 documented incidents, average severity 7.3/10. Most common failure mode: security vulnerability.
n = 6
6
Incidents
7.3
Avg severity
0
Critical
6
Source checked

Severity breakdown

Stacked severity breakdown per agent. Longer bar = more incidents.

Failure modes

Distribution of failure modes across all documented incidents.

Worst documented incident

8.0high

GitHub Copilot CLI ran arbitrary attacker commands via a nested bare git repository abusing core.fsmonitor (CVE-2026-45033)

All 6 incidents

8.0
GitHub Copilot CLI ran arbitrary attacker commands via a nested bare git repository abusing core.fsmonitor (CVE-2026-45033)
8.0
GitHub Copilot suggested 2,702 valid secrets — 33% of extracted keys were real, live credentials
8.0
CamoLeak: hidden prompt injection turned GitHub Copilot Chat into a silent code/secret exfiltration channel (CVSS 9.6)
8.0
Rule Files Backdoor: hidden Unicode in config files made Copilot and Cursor emit malicious code
7.0
Copilot CLI's checkpoint restore ran git clean -fd and destroyed 1GB of evaluation data the agent never touched
5.0
Copilot CLI destroyed its own 233MB session log trying to "back it up" with a hardlink instead of a copy