{"data":{"id":"a25b4b26-9a24-46d1-a626-bd9e2c34cebd","title":"CVE-2026-96893: GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and…","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. Under certain conditions, an authenticated user could inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users. The cause is improper neutralization of special elements in AI conversation context construction.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-96893","publishedAt":"2026-10-13T02:17:00.720Z","cveId":"CVE-2026-96893","cweIds":null,"cvssScore":"7.3","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["GitLab EE AI agent features"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitLab EE prompt injection into AI agent instructions via conversation context","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-13T06:08:11.671Z","kevDateAdded":null,"advisoryAliases":["GHSA-5vgp-j37h-7wfx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-13T06:08:15.521Z","patchAvailable":null,"disclosureDate":"2026-10-13T02:17:00.720Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}