A vulnerability in GitLab EE versions 18.9 up to but not including 19.1.7, 19.2 up to but not including 19.2.5, and 19.3 up to but not including 19.3.1 allowed an authenticated user with developer-role permissions to execute arbitrary commands in a CI context. This occurred due to the Claude agent processing configuration from a user-controlled source. The issue has been remediated in the specified fixed versions.