CyberRota Analysis
AI-GeneratedGitLab versions from 18.7 to 19.2.7, 19.3 to 19.3.3, and 19.4 to 19.4.1 are vulnerable to unauthorized access to sensitive CI/CD variable values, potentially exposing critical information through debug-mode job traces when using the Duo AI troubleshooting feature. This high-severity vulnerability could be exploited by authenticated users, making it essential for organizations using affected GitLab versions to prioritize immediate updates to mitigate potential data leaks. Security teams should ensure that all instances are upgraded to the latest versions to maintain the integrity of their CI/CD processes.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI troubleshooting feature due to missing authorization checks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)