A vulnerability in GitLab EE versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 could allow an attacker to access internal notes in GitLab Duo responses due to incompatible policies. This issue exposes sensitive information under certain conditions. A patch is available to address this vulnerability.