Threat database

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

A Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-75871) was found in the GitLab AI Gateway component affecting multiple versions from 18.10 through 19.2.2. This flaw allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to attacker-controlled endpoints by manipulating the HTTP Host header in inline flow configurations. Exploitation could lead to disclosure of sensitive Google Cloud Vertex service credentials and private signing keys. The vulnerability has a high severity score of 8.2 and affects the cloud-hosted GitLab AI Gateway service. GitLab has remediated this issue in their cloud environment.

A Server-Side Request Forgery (SSRF) vulnerability exists in the GitLab AI Gateway component affecting multiple versions from 18.9.0 through 19.2.2. An authenticated user with Duo Agent Platform access could exploit this flaw to redirect model requests to attacker-controlled endpoints, potentially exposing Google Vertex AI or AWS Bedrock cloud service credentials. The vulnerability has a high severity score of 8.2 and affects cloud-hosted services.

GitLab contains a server-side request forgery (SSRF) vulnerability that affects the handling of requests to the internal network when webhooks are enabled. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information are provided in the available data.

CVE-2026-1868 is a critical vulnerability in GitLab AI Gateway's Duo Workflow Service component affecting multiple versions from 18.1.6 through 18.8.0. It arises from improper neutralization of special elements in template expansion, allowing crafted Duo Agent Platform Flow definitions to trigger insecure template processing. Exploitation can lead to denial of service or remote code execution without user interaction, requiring only low privileges. The vulnerability has been fixed in versions 18.6.2, 18.

EPSS 0.6%VulnerabilityGitLab#cwe-1336Germany+6

GitLab Community and Enterprise Editions have a server-side request forgery (SSRF) vulnerability in the CI Lint API that allows unauthorized external users to perform SSRF attacks. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

EPSS 0.5%VulnerabilityGitLab#cwe-306Germany+9

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

EPSS 0.6%Vulnerability#cwe-79Germany+9

An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project

EPSS 0.5%Vulnerability#cwe-425Germany+8

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

EPSS 3.8%Vulnerability#cwe-22Germany+9

CVE-2021-22205 is a remote code execution vulnerability affecting GitLab Community and Enterprise Editions. The flaw arises from improper validation of image files uploaded through GitLab Workhorse, which uses ExifTool to process image file extensions. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.