5.3 MediumCWE-918
CVE-2026-9204
GitLab vulnerability
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.4%probability of exploitation in the next 30 days
Higher than 29% of scored CVEs
SeverityCVSS
5.3Medium
Description NVD
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.
Coverage 1 article · 1 outlet
- Important GitLab Security Updates Address 12 VulnerabilitiesSecurityOnline · first in our coverage · mentions it in passing