CVE-2026-2104Patch(gitlab / gitlab)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch gitlab gitlab systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assigned to other users via CSV export due to insufficient authorization checks.

gitlab CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/

Other references

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gitlab

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-04-08); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

gitlab

Products

gitlab

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Patch

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-08	2	Patch2
2026-04-09	1	Disclosure1

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds182d
Disclosure
CVE-2026-2104 Confidential Issues Access via CSV Export in GitLab CE/EE 18.2-18.10 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2104
Post summary
The post announces CVE‑2026‑2104, noting a confidentiality issue via CSV export in GitLab CE/EE 18.2‑18.10, but lacks details on PoC, exploitation, or mitigation.
0000061
4.0K followersView on X
Infoflowcloud@infoflowcloud182d
Patch
🚨*CVE* CVE-2026-2104 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an a… https://www.cve.org/CVERecord?id=CVE-2026-2104 ----- Traducción: CVE-2026-2104 Git… http://infoflow.cloud`
Post summary
The post announces GitLab's remediation of CVE-2026-2104 across multiple versions, confirming a patch is available. No exploit details or active exploitation reports are mentioned.
0000039
67 followersView on X
CVE@CVEnew182d
Patch
CVE-2026-2104 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an a… https://www.cve.org/CVERecord?id=CVE-2026-2104
Post summary
The post announces that GitLab has remediated CVE‑2026‑2104 across specified versions, with no exploit or PoC details provided.
00000157
57.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gitlab	gitlab	-	-	-
App	gitlab	gitlab	-	-	-

Explore more

Back to dashboard gitlab CVEs gitlab vulnerabilities