Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-8716

Use of Incorrectly-Resolved Name or Reference in GitLab

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to access CI data from a different ref type than intended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

Default version status: unaffected

  • 12.7 to < 18.10.7affected
  • 18.11 to < 18.11.4affected
  • 19.0 to < 19.0.1affected

References