# GitLab Runner v18.11.3

- Product: GitLab Runner (https://whatsnew.fyi/product/gitlab-runner)
- Vendor: GitLab
- Date: 2026-05-11
- Version: v18.11.3
- Original notes: https://gitlab.com/gitlab-org/gitlab-runner/-/tags/v18.11.3
- Permalink: https://whatsnew.fyi/product/gitlab-runner/releases/v18.11.3

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

Version v18.11.3

- **fixed** — Fix role ARN injection vulnerability

###### Bug fixes

- Merge branch 'sh-fix-role-arn-injection' into '18-11-stable' [!6715](https://gitlab.com/gitlab-org/gitlab-runner/-/merge_requests/6715)