GitLab Enterprise Edition has a flaw that, when an authenticated user possesses a specific granular permission, allows that user to retrieve a GitLab Duo Agent Platform token that bypasses governance controls. The vulnerability arises from the system making a security decision based on untrusted input, which enables the attacker to obtain elevated credential tokens.

The flaw applies to GitLab Enterprise Edition versions 19.1 and later up to 19.4.1. Versions 19.1, 19.2.x prior to 19.2.8, 19.3.x prior to 19.3.5, and 19.4.x prior to 19.4.2 are affected. The impacted product is GitLab by GitLab.

The CVSS score of 4.3 indicates moderate impact. The vulnerability requires authentication and a specific granular permission, so it is not widely exploitable. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to be authenticated with the appropriate privilege to take advantage of the flaw.