Information Disclosure Vulnerability in GitLab Enterprise Edition

CVE-2025-6945

What is CVE-2025-6945?

GitLab has addressed a security vulnerability affecting its Enterprise Edition, which exists in all versions from 17.8 prior to 18.3.6, 18.4 prior to 18.4.4, and 18.5 prior to 18.5.2. An authenticated attacker could exploit this flaw to leak confidential information from sensitive issues by injecting hidden prompts into merge request comments. The prompt injection could lead to unauthorized access to critical information that should remain confidential, compromising the security integrity of users' sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References