SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-6267

HIGH · CVSS 8.5 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

GitLab versions from 10.1.0 to 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 are vulnerable to a flaw that allows authenticated users with Developer roles to access unauthorized information due to inadequate access controls in internal request handling. This high-severity vulnerability could lead to data exposure within the application. Organizations using affected versions should prioritize remediation to protect sensitive information and maintain compliance.

CVE
CVE-2026-6267
Severity
HIGH
CVSS
8.5
EPSS
0.33%
GitLab

Original NVD Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access controls on internal request handling.

Related CVEs

Other vulnerabilities affecting the same vendor(s)