CVE-2025-13781

GitLab EE was affected by a missing authorization check in GraphQL mutations that could let an authenticated user modify instance-wide AI feature provider settings. The issue impacted GitLab EE versions 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1. Remediation involved a patch r...