GitLab Enterprise Edition has an insecure trust decision flaw in its billing eligibility checks that can allow an authenticated user to access paid AI features without a valid subscription; the vulnerability arises from insufficient server‑side validation before granting AI service access, enabling privileged users to consume premium functionality beyond their entitlement.

The issue affects GitLab Enterprise Edition versions 17.8 through 19.5.1, excluding the patched releases 19.3.6, 19.4.3, and 19.5.1; any installations running a version before these patches are potentially vulnerable, while later releases have fixed the problem.

The CVSS score of 4.3 indicates moderate severity; no EPSS data is available, so the exploitation likelihood remains unknown, and the vulnerability is not listed in the CISA KEV catalog. The attack vector requires an authenticated user with valid login credentials to request AI services, bypassing missing billing checks; the flaw does not permit remote code execution or arbitrary code execution, limiting the threat to misuse of paid AI features.