← Back

CVE-2026-8716

nvd nist
Published: May 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: cve@gitlab.com (Secondary)

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to access CI data from a different ref type than intended.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 12.7.0 to 18.10.7
Gitlab
From 18.11.0 to 18.11.4
Gitlab
From 12.7.0 to 18.10.7
Gitlab
From 18.11.0 to 18.11.4
Gitlab
Version 19.0.0
Gitlab
Version 19.0.0

Related CWEs

CWE-706
Use of Incorrectly-Resolved Name or Reference
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

References (2)

Source: cve@gitlab.com
Release NotesVendor Advisory
Source: cve@gitlab.com
Broken Link

Timeline

No history available yet.