EUVD-2026-107675

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could have re-enabled AI-backed data...

CVE-2026-103515

GitLab EE versions 19.2 before 19.3.6 , 19.4 before 19.4.3 , and 19.5 before 19.5.1 are vulnerable to an incorrect authorization issue (CWE-863). Due to insufficient granularity in admin-lock enforcement controls, an authenticated user with group Owner permissions could re-enable AI-backed data e...