Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| Arbitrary file read via the UploadsRewriter when moving and issueAnalysed#827052 | Valid | File and Path Handling | Critical | 2020-04-27 | $20,000 | 1,503 |
| Account Takeover via Password Reset without user interactionsAnalysed#2293343 | Valid | Access Control | Critical | 2025-02-26 | $35,000 | 989 |
| Git flag injection - local file overwrite to remote code executionAnalysed#658013 | Valid | Command and Code Injection | Critical | 2019-12-19 | $12,000 | 777 |
| Exfiltrate and mutate repository and project data through injected templated serviceAnalysed#446585 | Valid | Access Control | Critical | 2019-03-05 | $11,000 | 762 |
| Local files could be overwritten in GitLab, leading to remote command executionAnalysed#587854 | Valid | Command and Code Injection | Critical | 2019-07-17 | $12,000 | 542 |
| RCE when removing metadata with ExifToolAnalysed#1154542 | Valid | Command and Code Injection | Critical | 2021-05-14 | $20,000 | 508 |
| Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requestsAnalysed#689314 | Valid | Access Control | Critical | 2019-11-27 | $12,000 | 457 |
| RCE via unsafe inline Kramdown options when rendering certain Wiki pagesAnalysed#1125425 | Valid | Command and Code Injection | Critical | 2021-04-20 | $20,000 | 427 |
| gitlab-workhorse bypass in Gitlab::Middleware::Multipart allowing files in `allowed_paths` to be readAnalysed#850447 | Valid | Information Disclosure | Critical | 2020-06-08 | $10,000 | 410 |
| Remote Command Execution via Github importAnalysed#1679624 | Valid | Command and Code Injection | Critical | 2022-10-06 | $33,510 | 392 |
| RCE via the DecompressedArchiveSizeValidator and Project BulkImports (behind feature flag)Analysed#1609965 | Valid | Command and Code Injection | Critical | 2022-09-13 | $33,510 | 387 |
| JSON serialization of any Project model results in all Runner tokens being exposed through Quick ActionsAnalysed#509924 | Valid | Information Disclosure | Critical | 2019-04-20 | $12,000 | 366 |
| Bypass of GitLab CI runner slash fix in YAML validationAnalysed#409395 | Valid | Input Validation and Logic | Critical | 2019-04-10 | – | 363 |
| Arbitrary file read via the bulk imports UploadsPipelineAnalysed#1439593 | Valid | File and Path Handling | Critical | 2022-03-21 | $29,000 | 329 |
| Stored XSS in markdown via the DesignReferenceFilterAnalysed#1212067 | Valid | Cross-site Scripting | Critical | 2021-10-18 | $16,000 | 317 |
| An attacker can run pipeline jobs as arbitrary userAnalysed#894569 | Valid | Input Validation and Logic | Critical | 2020-08-26 | $12,000 | 307 |
| Full access to internal Gitlab instances at redash.gitlab.com, dashboards.gitlab.com, prometheus.gitlab.comAnalysed#498964 | Valid | Access Control | Critical | 2019-04-19 | – | 306 |
| RCE via github import#1672388 | Valid | Command and Code Injection | Critical | 2022-11-16 | – | 271 |
| Privilege escalation from any user (including external) to gitlab admin when admin impersonates youAnalysed#493324 | Valid | Access Control | Critical | 2020-08-26 | – | 256 |
| Steal private objects of other projects via project importAnalysed#743953 | Valid | Insecure Direct Object Reference | Critical | 2022-06-07 | $20,000 | 254 |
| Full Read SSRF on Gitlab's Internal Grafana#878779 | Valid | Server-Side Request Forgery | Critical | 2020-08-07 | – | 229 |
| Arbitrary file read during project importAnalysed#1132378 | Valid | File and Path Handling | Critical | 2021-05-24 | $16,000 | 194 |
| Git flag injection leading to file overwrite and potential remote code executionAnalysed#653125 | Valid | Command and Code Injection | Critical | 2019-12-19 | $3,500 | 169 |
| Private objects exposed through project importAnalysed#767770 | Valid | Insecure Direct Object Reference | Critical | 2022-06-07 | $20,000 | 133 |
| Read files on application server, leads to RCEAnalysed#178152 | Valid | Information Disclosure | Critical | 2016-11-03 | – | 114 |
| Able to view hackerone reports attachmentsAnalysed#979787 | Valid | Information Disclosure | Critical | 2022-07-11 | – | 103 |
| Ability to access all user authentication tokens, leads to RCEAnalysed#158330 | Valid | Access Control | Critical | 2016-11-03 | – | 61 |
| Access to GitLab's Slack by abusing issue creation from e-mailAnalysed#218230 | Valid | Authentication | Critical | 2017-09-21 | – | 54 |
| Command injection by overwriting authorized_keys file through GitLab importAnalysed#298873 | Valid | Command and Code Injection | Critical | 2018-04-27 | $2,000 | 50 |
| GitLab CI runner can read and poison cache of all other projectsAnalysed#301432 | Valid | File and Path Handling | Critical | 2018-04-27 | $2,000 | 43 |
| SQL injection in MilestoneFinder order methodAnalysed#298176 | Valid | SQL Injection | Critical | 2018-04-27 | $2,000 | 41 |
| Vulnerability in project import leads to arbitrary command execution#378148 | Valid | Command and Code Injection | Critical | 2018-08-22 | – | 32 |
| all private tokens are leaked to an unauthenticated attacker#268794 | Valid | Access Control | Critical | 2017-09-21 | – | 20 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (2,942 analysed so far), which can be wrong. Data as of 2026-11-15.