Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-1751

Missing Authorization in GitLab

Description

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

Default version status: unaffected

  • 16.8 to < 18.5.0affected

References