{"api_version":"1","generated_at":"2026-10-26T09:43:50+00:00","cve":"CVE-2026-96893","urls":{"html":"https://cve.report/CVE-2026-96893","api":"https://cve.report/api/cve/CVE-2026-96893.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-96893","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-96893"},"summary":{"title":"Improper Neutralization of Input Used for LLM Prompting in GitLab","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","state":"PUBLISHED","assigner":"GitLab","published_at":"2026-10-13 02:17:00","updated_at":"2026-10-14 13:55:39"},"problem_types":["CWE-74","CWE-1427 CWE-1427: Improper Neutralization of Input Used for LLM Prompting"],"metrics":[{"version":"3.1","source":"cve@gitlab.com","type":"Secondary","score":"7.3","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.3","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","version":"3.1"}}],"references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","name":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","refsource":"cve@gitlab.com","tags":["Release Notes","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/607968","name":"https://gitlab.com/gitlab-org/gitlab/-/work_items/607968","refsource":"cve@gitlab.com","tags":["Issue Tracking"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-96893","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96893","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 19.1 19.2.8 semver","platforms":[]},{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 19.3 19.3.5 semver","platforms":[]},{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 19.4 19.4.2 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Upgrade to versions 19.2.8, 19.3.5, 19.4.2 or above.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"This vulnerability has been discovered internally by GitLab team member Mert Coskuner.","lang":"en"}],"nvd_cpes":[{"cve_year":"2026","cve_id":"96893","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitlab","cpe5":"gitlab","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"enterprise","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-96893","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-14T03:59:11.636585Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-14T10:51:05.742Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"GitLab","repo":"https://gitlab.com/gitlab-org/gitlab","vendor":"GitLab","versions":[{"lessThan":"19.2.8","status":"affected","version":"19.1","versionType":"semver"},{"lessThan":"19.3.5","status":"affected","version":"19.3","versionType":"semver"},{"lessThan":"19.4.2","status":"affected","version":"19.4","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"This vulnerability has been discovered internally by GitLab team member Mert Coskuner."}],"descriptions":[{"lang":"en","value":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1427","description":"CWE-1427: Improper Neutralization of Input Used for LLM Prompting","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-13T01:05:41.162Z","orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab"},"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/607968"},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"}],"solutions":[{"lang":"en","value":"Upgrade to versions 19.2.8, 19.3.5, 19.4.2 or above."}],"title":"Improper Neutralization of Input Used for LLM Prompting in GitLab"}},"cveMetadata":{"assignerOrgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","assignerShortName":"GitLab","cveId":"CVE-2026-96893","datePublished":"2026-10-13T01:05:41.162Z","dateReserved":"2026-09-23T19:34:35.812Z","dateUpdated":"2026-10-14T10:51:05.742Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-13 02:17:00","lastModifiedDate":"2026-10-14 13:55:39","problem_types":["CWE-74","CWE-1427 CWE-1427: Improper Neutralization of Input Used for LLM Prompting"],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:11.636585Z","id":"CVE-2026-96893","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"19.1.0","versionEndExcluding":"19.2.8","matchCriteriaId":"139BD412-9F3F-45BE-9379-DCDF72A19E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"19.3.0","versionEndExcluding":"19.3.5","matchCriteriaId":"75C2C2EE-4DF9-4AB5-9E15-2EC799667C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"19.4.0","versionEndExcluding":"19.4.2","matchCriteriaId":"FAAF2A38-5C01-490C-A191-8532B58C246B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"96893","Ordinal":"1","Title":"Improper Neutralization of Input Used for LLM Prompting in GitLa","CVE":"CVE-2026-96893","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"96893","Ordinal":"1","NoteData":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","Type":"Description","Title":"Improper Neutralization of Input Used for LLM Prompting in GitLa"}]}}}