SecurityOnlineDo Son
GitLab patches critical flaw CVE-2026-6267 allowing data access
Part of the CVE-2026-6267 story · since 30 Jul
- Thu 30 Jul, 04:30 UTC. SecurityOnline, first report. GitLab patches critical flaw CVE-2026-6267 allowing data access. This article, 1st of 1.
GitLab has released version 19.2.1, addressing 13 security vulnerabilities. The most critical is CVE-2026-6267, rated 8.5 for high severity, which allows unauthorized data access. No confirmed exploitation has been reported. Other notable vulnerabilities include CVE-2026-12436 (8.4) and CVE-2026-15975 (7.5). Users are advised to upgrade immediately to mitigate risks, as many issues can be exploited by low-privilege accounts.
The vulnerabilities were primarily identified via GitLab's HackerOne bug bounty program, indicating strong scrutiny of the platform. Existing affected versions include those prior to the latest release.
How the story developed
1 article from 1 outlet since 30 Jul. Quiet since 30 Jul. This was the first report.
- Thu 30 Jul, 04:30 UTC. SecurityOnline, first report. GitLab patches critical flaw CVE-2026-6267 allowing data access. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Thu 30 JulDay 01
- GitLab patches critical flaw CVE-2026-6267 allowing data access04:30 · SecurityOnline · First report · This article, 1st of 1