CVE-2026-96893

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.1 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1

Description An issue exists where improper neutralization of special elements during the construction of AI conversation context allows an authenticated user to inject specially crafted content into AI agent instructions. This could lead to unintended command execution attributed to other users. This is a case of Prompt Injection, where an attacker manipulates the input provided to a Large Language Model (LLM) to override its original instructions and execute unauthorized actions.

Recommendations Update GitLab EE versions 19.1 through 19.2.7 to version 19.2.8. Update GitLab EE versions 19.3 through 19.3.4 to version 19.3.5. Update GitLab EE versions 19.4 through 19.4.1 to version 19.4.2.