CVE-2026-6552

Published: Jun 11, 2026Modified: Jul 31, 2026

Description

Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to explicitly consent to that group controlling their GitLab account for sign-in, and management of group SAML identities by a group Owner is therefore expected behavior rather than an authorization bypass. No GitLab version was affected.

Affected Products (1)

CPE details will appear after the next data sync.

Gitlab

1 product

Gitlab

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Timeline

No history available yet.