A vulnerability in GitLab EE versions from 18.7 up to but not including 19.2.7, 19.3 up to but not including 19.3.3, and 19.4 up to but not including 19.4.1 could allow an authenticated user to access sensitive CI/CD variable values via debug-mode job traces through the Duo AI troubleshooting feature due to missing authorization checks. This issue has been remediated in versions 19.2.7, 19.3.3, and 19.4.1.