GitLab October 12, 2026 security patch bulletin: Duo agent and related fixes

Evidence record

Read the original source ↗

Claim-level citations (6)

• supportsGitLab Duo agent context accepted instructions with cross-user effects: GitLab disclosed CVE-2026-96893: crafted content in AI agent instructions could under certain conditions cause commands to execute under the attribution of another user.

  CVE-2026-96893 section of October 12 critical patch bulletin.

• supportsGitLab Duo agent context accepted instructions with cross-user effects: GitLab listed fixed versions 19.2.8, 19.3.5 and 19.4.2 for the affected EE branches.

  CVE-2026-96893 section, Impacted Versions and patch-release header.

• supportsGitLab Duo agent context accepted instructions with cross-user effects: For CVE-2026-96893, GitLab lists affected EE versions starting with 19.1 before 19.2.8, the 19.3 branch before 19.3.5, and the 19.4 branch before 19.4.2, and credits internal researcher Mert Coskuner.

  CVE-2026-96893, Impacted Versions and discovery credit.

• supportsGitLab Duo token issuance bypassed configured governance checks: GitLab describes CVE-2026-105458 as a case where an authenticated user with a particular granular permission could obtain an agent platform token that bypassed configured governance controls.

  CVE-2026-105458 section in patch bulletin.

• supportsGitLab Duo token issuance bypassed configured governance checks: The affected GitLab EE release branches were fixed in 19.2.8, 19.3.5 and 19.4.2.

  CVE-2026-105458 section, Impacted Versions.

• supportsGitLab Duo token issuance bypassed configured governance checks: GitLab attributes CVE-2026-105458 to reliance on untrusted input in a security decision, affecting EE from 19.1 before the fixed 19.2.8, 19.3.5 and 19.4.2 patch lines. The bulletin credits internal researcher Rahul Barnwal.

  CVE-2026-105458, description, Impacted Versions and discovery credit.