AI-Generated GitHub Copilot "Autofix" Allowed Compromise of Snowflake's Jira

Wiz Research's AI-powered security tool discovered a critical vulnerability in Snowflake's GitHub Actions workflow that was inadvertently introduced by GitHub Copilot's "Autofix" feature on June 18, 2026. The vulnerability allowed unauthenticated users to execute arbitrary commands by opening a GitHub issue with a specially crafted title, and it compromised access to Snowflake's Jira portal before being responsibly disclosed and patched on June 23, 2026. This incident demonstrates how AI coding assistants can inadvertently introduce security flaws by replacing secure coding patterns with vulnerable ones.