CVE-2026-124368.4HighCWE-915
GitLab vulnerability
Not in CISA KEVVendor fix available
0.5%probability of exploitation in the next 30 days
40th percentile
050100
Higher than 40% of scored CVEs
8.4HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of user-supplied attributes when processing pipeline schedule inputs.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Jul.
- GitLab patches critical flaw CVE-2026-6267 allowing data accessSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.