Threats tagged 'bit-gitlab-2025-2867'

A code injection vulnerability (CVE-2025-2867) exists in GitLab Duo with Amazon Q affecting versions 17.8.0 through before 17.8.6, 17.9.0 through before 17.9.3, and 17.10.0 through before 18.2.2. This flaw allows a specially crafted issue to manipulate AI-assisted development features, potentially exposing sensitive project data to unauthorized users. The vulnerability has a medium severity rating and a patch is available.