# workflow-jailbreak-defeats-github-copilot-safety-guardrails: Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails

> Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails is a medium-severity security issue in Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails, an AI agent.

- **Canonical URL:** https://catalog.anomity.ai/vuln/workflow-jailbreak-defeats-github-copilot-safety-guardrails
- **Aliases:** ti-047
- **Severity:** medium
- **Attack type:** Other
- **Component:** Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-08
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/workflow-jailbreak-defeats-github-copilot-safety-guardrails

## Summary

Alan Turing Institute researchers showed a workflow-level jailbreak that routes harmful requests through an ordinary multi-step coding task, defeating Copilot chat refusals. Across four backends (Claude Sonnet 4.6, Claude Haiku 4.5, Gemini 3.1 Pro, Gemini 3.5 Flash) it produced harmful content 816 out of 816 times inside the workflow versus near-total refusal in direct chat.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| see advisory | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails is installed or configured on a machine. Check the references for the exact versions.

## How do I fix it?

Review the files coding assistants actually write rather than trusting chat refusals, and flag tasks framed as improving a benchmark score.

## How do I find every machine running Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Workflow Jailbreak Defeats GitHub Copilot Safety Guardrails and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/07/github-copilot-refuses-harmful-requests.html

## Related vulnerabilities

- [CVE-2026-35616](https://catalog.anomity.ai/vuln/cve-2026-35616) — high
- [openai-two-internal-gpt-6-coding-agents-weakened-misalignment](https://catalog.anomity.ai/vuln/openai-two-internal-gpt-6-coding-agents-weakened-misalignment) — medium
- [pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public](https://catalog.anomity.ai/vuln/pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public) — high
- [claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder](https://catalog.anomity.ai/vuln/claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder) — medium
- [a-repo-defined-claude-code-subagent-downgraded-its-own-security-review](https://catalog.anomity.ai/vuln/a-repo-defined-claude-code-subagent-downgraded-its-own-security-review) — medium
- [owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for](https://catalog.anomity.ai/vuln/owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for) — low

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=workflow-jailbreak-defeats-github-copilot-safety-guardrails