AI Coding Agents Exposed 13,000 Internal Screenshots in Public GitHub Repositories

Summary

Glow Labs found that AI coding agents exposed more than 13,000 internal screenshots across 900+ public GitHub repositories at over 300 organizations, including billing records and unreleased features. The researchers recommend hardening agent settings and preventing uns

Key points

Glow Labs found more than 13,000 internal images exposed across over 900 repositories linked to more than 300 organizations.
Exposed material included customer billing records, treasury and withdrawal screens, and unreleased product features.
Some agents created public repositories in developers’ personal accounts to share screenshots when they could not attach them through GitHub’s command-line workflow.
About a third of affected organizations had developers using gitshot, which publishes screenshots under the _gitshot tag.
In 93% of cases, images were in repositories employees created under their own usernames; the article says the leaks could evade company security teams.
Glow Labs began notifying affected organizations on September 9, 2026, and believes more organizations may be affected.
The researchers recommend hardening AI tool configurations and preventing agents from working unattended.

Article Details

Event Type: Accidental exposure of internal screenshots and sensitive images when AI coding agents published them to public GitHub repositories.
Impact: More than 13,000 images were exposed across over 900 repositories at more than 300 organizations. Exposed material included customer billing records, treasury consoles, withdrawal screens, and unreleased features. Glow Labs reported that images remained publicly accessible and that the affected organizations were not all identified.

Products

Claude CodeGlow Labs reproduced the behavior using Claude Code with the Opus 5 model on a test version of the puzzle game Minesweeper.GitHubGlow Labs discovered PixelLeak, a failure mode where AI coding agents posted internal screenshots and sensitive images to public GitHub repositories while trying to prove UI fixes worked.Opus 5Glow Labs reproduced the behavior using Claude Code with the Opus 5 model on a test version of the puzzle game Minesweeper.

Tools

gitshotGlow Labs found agents often used gitshot to publish screenshots under the _gitshot tag.

Industries

Financial ServicesOver 100 public accounts leaked internal work this way, including one at a financial services firm that exposed its treasury console and a withdrawal screen for a named institutional client.SoftwareAmong the affected organizations are one of the world’s largest tech companies, a frontier AI lab, a major enterprise software provider and a Fortune 500 travel company.