CVE-2026-12053

Published: Jun 25, 2026Modified: Jun 26, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.

Affected (1)

Products: Gitlab: Gitlab

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Version 19.1.0

Related CWEs

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (3)

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released/

Source: cve@gitlab.com

Release NotesVendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/work_items/602194

Source: cve@gitlab.com

Broken Link

https://hackerone.com/reports/3757762

Source: cve@gitlab.com

Permissions Required

Timeline

No history available yet.