CVE-2026-110264: GitLab 7.0 to before 18.11.13, 19.0 to before 19.0.10, 19.1 to before 19.1.9, 19.2 to before 19.2.9, 19.3 to before…

Affected technology

GitLab · 7.0 to before 18.11.13, 19.0 to before 19.0.10, 19.1 to before 19.1.9, 19.2 to before 19.2.9, 19.3 to before 19.3.6, 19.4 to before 19.4.3, 19.5 to before 19.5.1
GitLab

Description’s affected range: versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could run attacker-chosen code under the conditions described by the source. Vendor/CNA’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high.