Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Improper Access Control Vulnerability in Issue Description Renderer

Vulnerability

A vulnerability exists in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 18.11 prior to 18.11.1. This vulnerability allows authenticated users to access titles of confidential or private issues in public projects. The issue arises from improper access control during the issue description rendering process.

Impact

Exploitation of this vulnerability could lead to unauthorized access to confidential or private issue titles in public projects.

Remediation

Users are advised to upgrade to GitLab versions 18.11.1, 18.10.4, or 18.9.6. Instructions for updating GitLab can be found on the GitLab Update page.

Added: Apr 22, 2026, 6:45 PM
Updated: Apr 22, 2026, 6:45 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
0.6
exploitability
5.2
remediation
7.7
relevance
6.5
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.