Researchers successfully made GitHub Copilot CLI read sensitive local files and send their contents to an external endpoint.