GitLab CE/EE CI Data Access Vulnerability

Vulnerability

A vulnerability exists in GitLab CE/EE versions 12.7 prior to 18.10.7, 18.11 prior to 18.11.4, and 19.0 prior to 19.0.1. Under certain conditions, this vulnerability could have allowed an authenticated user to access Continuous Integration (CI) data from an unintended reference type.

Impact

Exploitation of this vulnerability could lead to unauthorized access to CI data from different reference types.

Added: May 28, 2026, 3:39 AM
Updated: May 28, 2026, 3:39 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
0.6
exploitability
5.2
remediation
7.7
relevance
9.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.