CVE-2026-96893
GitLab: injection
- Risk score
- 53/100
- CVSS
- 7.3 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command executio…
- Affected
- GitLab before 19.2.8, 19.3, 19.3.5, 19.4, 19.4.2
- Fix
- Upgrade GitLab to 19.2.8, 19.3, 19.3.5, 19.4 or 19.4.2 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.3 high
References
Original description
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.
Last activity 13 Oct 2026. Patch Forecast updates every hour.