GitLab patched CVE-2026-18252 on 26 August 2026. A Developer could make its Duo Claude AI agent run commands in CI. No exploitation has been reported.