CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read

GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

EUVD-2026-85736

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

EUVD-2026-85734

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

EUVD-2026-85733

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

CVE-2026-92529

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

CVE-2026-92628

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

CVE-2026-92470

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

CVE-2026-89078

GitLab CE/EE versions 19.2 before 19.2.7 , 19.3 before 19.3.3 , and 19.4 before 19.4.1 are affected by a double free vulnerability. This issue occurs when the system parses a specially crafted regular expression within a CI/CD configuration , which could allow an authenticated user to execute arb...

CVE-2026-92470

GitLab EE versions 18.7 before 19.2.7 , 19.3 before 19.3.3 , and 19.4 before 19.4.1 are vulnerable to a missing authorization check in the Duo AI troubleshooting feature . Under certain conditions, an authenticated user could access sensitive CI/CD variable values from debug-mode job traces. GitL...

CVE-2026-92529 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

CVE-2026-92529

An improper authorization check in GitLab EE allows an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls . This vulnerability specifically affects workflows in namespaces that the user does not control. The issue is present in versions 19.1 ...

CVE-2026-92874 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due ...

CVE-2021-22192

CVE-2021-22192 CVE-2021-22192 Range: Unauthorized User RCE Vulnerability 0x10 Range Environment 0x20 Directory Structure root@kitploit: CVE-2021-22192 ├── README.md ............... This README ├── imgs .................... Images for README ├── gitlab .................. Gitlab container mount...

CVE-2020-13277

CVE-2020-13277 CVE-2020-13277 Lab: GitLab Logic Vulnerability - Unauthorized User Access to Private Repositories 0x10 Lab Environment 0x20 Directory Structure root@kitploit: CVE-2020-13277 ├── README.md ............... This README file ├── imgs .................... Images for README ├── gitlab...