What happened
Published 2026-10-13 (CVSS 4.3, CWE-807) via GitLab advisory with the same patch release as CVE-2026-96893. Verified via NVD REST API.
Why it matters
AI agent platform tokens gate which identities agents act as in GitLab; a governance-bypassing token lets a lesser user operate agent functionality beyond intended bounds in enterprise CI/CD.
Attack vector
Reliance on untrusted input in a security decision when issuing a Duo Agent Platform token; a user with a specific granular permission obtains a token that circumvents intended agent-platform governance constraints.
Affected systems
GitLab EE 19.1–19.2.8, 19.3–19.3.5, 19.4–19.4.2
Mitigation
Upgrade to GitLab EE 19.2.8 / 19.3.5 / 19.4.2 per the patch release.