Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Access Control Bypass Vulnerability Allowing Download of Private Artifacts

Vulnerability

A vulnerability exists in GitLab CE/EE in versions 15.6 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2. Under certain conditions, this vulnerability could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private artifacts, allowing them to be downloaded by users who should not have access.

Added: Aug 13, 2025, 10:16 PM
Updated: Aug 13, 2025, 10:16 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
4.8
remediation
0.0
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.