CVE-2026-96893

{
  "etk_id": "ETK-2026-1459",
  "cve_id": "CVE-2026-96893",
  "display_id": "CVE-2026-96893",
  "ghsa_id": "GHSA-5vgp-j37h-7wfx",
  "euvd_id": "EUVD-2026-98213",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Prompt injection in GitLab Duo Agent Platform",
  "summary": "GitLab EE Duo Agent Platform is affected in versions 19.1 through 19.2.7, 19.3.0 through 19.3.4, and 19.4.0 through 19.4.1. An authenticated user may be able to influence an AI agent's instructions, which can lead to commands being performed under another user's attribution in applicable interaction flows.",
  "mitigation": "Upgrade GitLab EE to 19.2.8, 19.3.5, or 19.4.2, according to your release line. Until upgraded, restrict untrusted users' ability to contribute content that AI agents can consume.",
  "vendor": "GitLab",
  "product": "GitLab",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 19.1, < 19.2.8",
        ">= 19.3, < 19.3.5",
        ">= 19.4, < 19.4.2"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "19.2.8",
        "19.3.5",
        "19.4.2"
      ],
      "package_name": "GitLab",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
  "epss_score": 0.0053,
  "epss_percentile": 0.4375,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 83.1805713,
  "t0_at": "2026-10-13T01:05:41.162000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-13T01:05:41.162000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-13T01:05:41.162000+00:00",
      "url": "https://github.com/advisories/GHSA-5vgp-j37h-7wfx"
    }
  }
}