Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Server-Side Request Forgery Vulnerability in Git Repository Import

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in GitLab Community Edition (CE) and Enterprise Edition (EE). This vulnerability affects all versions from 18.0 prior to 18.6.6, 18.7 prior to 18.7.4, and 18.8 prior to 18.8.4. Under certain conditions, the vulnerability could have allowed an authenticated user to bypass protections in the Git repository import functionality and perform SSRF against internal services.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of internal services through server-side request forgery.

Remediation

Users are advised to upgrade to GitLab versions 18.8.4, 18.7.4, or 18.6.6. Instructions for updating GitLab can be found on the GitLab Update page.

Added: Feb 11, 2026, 12:33 PM
Updated: Feb 11, 2026, 4:35 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
0.6
exploitability
4.7
remediation
7.7
relevance
3.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.