VulnSocial

CVE-2026-6267Patch(gitlab / gitlab)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch gitlab gitlab systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access controls on internal request handling.

gitlab CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-201

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • gitlab

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-07-30); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
gitlab
Products
gitlab

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-30: 1Mentions · 2026-08-07: 1Patch / Workaround · 2026-07-30: 1Patch / Workaround · 2026-08-07: 1Technical Details · 2026-07-30: 1Technical Details · 2026-08-07: 107-3008-07
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    The latest GitLab patch release fixes 13 vulnerabilities, including CVE-2026-6267, a high-severity data exposure flaw. Update self-managed GitLab now. #GitLab #CVE20266267 #DevSecOps #Vulnerability #PatchNow #InfoSec http://securityonline.info/gitlab-patch-release-19-2-1/

    Post summary

    GitLab released a patch for 13 vulnerabilities, including the high‑severity CVE‑2026‑6267 data exposure flaw, and urges self‑managed users to update.

    02042479
    13.0K followersView on X
  • iototsecnews@iototsecnews
    Patch

    GitLab の 13 件の脆弱性が FIX：不正なデータ露出／CI/CD パイプラインの改ざん／DoS 攻撃などの恐れ https://iototsecnews.jp/2026/07/30/gitlab-patches-13-security-flaws-enabling-data-exposure-ci-cd-tampering-and-dos-attacks/ GitLab において、内部のアクセス制御や検証処理の不備に起因する、複数の脆弱性 CVE-2026-6267／CVE-2026-12436／CVE-2026-15975 などが公表されました。この問題は、ユーザーからの入力検証やリソース管理が不十分なことに起因しています。悪用に成功した攻撃者が、非公開情報の閲覧や CI/CD 設定の不正書き換えを行い、さらには承認ルールを回避したコードの追加やシステムの応答停止を引き起こす恐れがあります。対応策として、修正パッチを含む最新バージョンへの更新と異常なログの確認が有効です。システムを安全に利用するためにも、速やかにアップデートを実施することが推奨されます。 #GitLab #Vulnerability

    Post summary

    GitLab disclosed 13 CVEs impacting access controls and input validation, released patches, and urged users to update; the post does not mention active exploitation, PoCs, or exploit tools.

    01000176
    505 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appgitlabgitlab---
Appgitlabgitlab---
Appgitlabgitlab19.2.0--
Appgitlabgitlab19.2.0--

Explore more

Back to dashboardgitlab CVEsgitlab vulnerabilities