GitLab Vulnerabilities Expose Users to Prompt Injection Attacks and Data Theft

GitLab has released patches addressing nine vulnerabilities across Community Edition and Enterprise Edition, including a prompt injection flaw in GitLab Duo that could leak sensitive information from confidential issues.

The company urges all self-managed installations to upgrade immediately to versions 18.5.2, 18.4.4, or 18.3.6, with the most alarming CVE being CVE-2025-6945, a prompt injection in GitLab Duo’s review feature that allows authenticated users to exfiltrate data by injecting hidden prompts into merge request comments.

The patch batch also covers a high-severity cross-site scripting vulnerability in the Kubernetes proxy (CVE-2025-11224) and two medium-severity information disclosure issues affecting access control and GraphQL subscriptions.

Enterprise Edition users should note CVE-2025-11865, an authorization bypass related to Duo workflows, while several lower-severity CVEs (including CVE-2025-2615, CVE-2025-7000, CVE-2025-6171, CVE-2025-11990, CVE-2025-7736, and CVE-2025-12983) address various disclosure and access-control gaps. GitLab[.]com users are already patched, and Dedicated customers require no action, according to GitLab.