GitLab has patched a 9.9-rated flaw that let a prompt template run commands on the host
Self-hosted instances have to upgrade; GitLab-hosted gateways were already patched. The pattern — user-authored flow configuration reaching a template engine — is not unique to GitLab.