Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Datadog API Credentials Disclosure Vulnerability

Vulnerability

A vulnerability exists in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 15.5 prior to 18.7.6, 18.8 prior to 18.8.6, and 18.9 prior to 18.9.2. This vulnerability could allow an authenticated user with maintainer-role permissions to expose Datadog API credentials under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to Datadog API credentials, potentially allowing for further actions or integrations with Datadog on behalf of the user.

Remediation

Users are advised to upgrade to GitLab versions 18.9.2, 18.8.6, or 18.7.6.

Added: Mar 11, 2026, 4:31 PM
Updated: Mar 11, 2026, 4:31 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
6.2
remediation
7.7
relevance
4.1
threat
6.4
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.