GitLab Duo AI-Assisted Development Feature Manipulation Vulnerability

A vulnerability exists in GitLab Duo with Amazon Q, affecting all versions from 17.8 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1. This vulnerability allows a crafted issue to manipulate AI-assisted development features, potentially exposing sensitive project data to unauthorized users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive project data.