CVE-2025-9486

creationtimestamp| type| source ---|---|--- 2026-08-13 14:05:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...

CVE-2025-9486

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed a user with a pending membership to receive permissions granted by a custom role, due to incorrect privilege...

CVE-2025-9486 Incorrect Privilege Assignment in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed a user with a pending membership to receive permissions granted by a custom role, due to incorrect privilege...

CVE-2025-9486

CVE-2025-9486 affects GitLab EE, with versions 15.6 up to before 19.0.6, 19.1 up to before 19.1.4, and 19.2 up to before 19.2.2. The issue arises from an incorrect privilege assignment that did not account for a user’s pending membership state, potentially allowing a user to receive permissions g...