CVE-2026-18252

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.9 through 19.1.6 GitLab EE versions 19.2 through 19.2.4 GitLab EE versions 19.3 through 19.3.0

Description An authenticated user with developer-role permissions can execute arbitrary commands within a CI context. This occurs because the Duo Claude AI agent processes configuration from a user-controlled source, allowing the injection of untrusted configuration to pull functionality from an untrusted control sphere. This can lead to unauthorized manipulation of the CI system.

Recommendations Update GitLab EE versions 18.9 through 19.1.6 to version 19.1.7. Update GitLab EE versions 19.2 through 19.2.4 to version 19.2.5. Update GitLab EE versions 19.3 through 19.3.0 to version 19.3.1.