Threats tagged 'bit-gitlab-2025-13772'

A missing authorization vulnerability in GitLab EE versions 18.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 allows authenticated users to access and manipulate AI model settings from unauthorized namespaces by tampering with namespace identifiers in API requests. This leads to unauthorized information disclosure and potential misuse of AI resources. A patch is available to remediate this issue.