#GitLab

GitLab Patched Claude Agent Command Flaw, Scored Severity Itself

CVE-2026-18252 is untrusted-input inclusion: the agent read configuration from a place the user controls. Full details stay embargoed for around 30 days.

3d ago