Wiz's autonomous "Red Agent" discovered and exploited a critical script injection vulnerability in Snowflake's snowflakedb/snowflake-connector-net repository, leading to the compromise of internal Jira credentials. The flaw resided in the jira_issue.yml GitHub Actions workflow, where an untrusted input from the github.event.issue.title was directly interpolated into a shell script via a run: block. While the PR ( #1218) included a fix for a different workflow, GitHub Copilot reportedly acted as a co-author and failed to flag the injection vulnerability introduced when a previously secure env: and jq parsing pattern was replaced by direct string interpolation. Furthermore, an ineffective if: condition failed to restrict execution, allowing any GitHub user to trigger the workflow. The Red Agent autonomously bypassed syntax errors during exploitation by adjusting its payload to use ; echo ' , successfully exfiltrating base64-encoded credentials from an Azure-hosted runner (20.106.182.197). These credentials granted read access to Snowflake's engineering and security projects on snowflakecomputing.atlassian.net . The vulnerability was live for five days—from June 18 to June 23, 2026—before being remediated via PR #1402, which restored the secure jq --arg pattern.