CVE-2026-18433

GitLab Enterprise Edition had an authorization flaw in a GraphQL query that could allow an authenticated user to read policy configuration for a namespace they are not authorized to access. Affected versions were 19.1 prior to 19.1.4 and 19.2 prior to 19.2.2. The issue originates from incorrect a...