CVE-2026-15723

GitLab CE/EE versions 10.1 before 19.3.6 , 19.4 before 19.4.3 , and 19.5 before 19.5.1 are vulnerable to an LDAP Injection vulnerability (CWE-90). When both OmniAuth SAML and LDAP auto-linking are enabled, improper input sanitization in the LDAP email lookup path allows an authenticated user to t...