CVE-2026-6269
EUVD-2026-3623111.06.2026, 12:16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect authorization enforcements.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 15.10.0 ≤ 𝑥 < 18.10.8 |
| gitlab | gitlab | 15.10.0 ≤ 𝑥 < 18.10.8 |
| gitlab | gitlab | 18.11.0 ≤ 𝑥 < 18.11.5 |
| gitlab | gitlab | 18.11.0 ≤ 𝑥 < 18.11.5 |
| gitlab | gitlab | 19.0.0 ≤ 𝑥 < 19.0.2 |
| gitlab | gitlab | 19.0.0 ≤ 𝑥 < 19.0.2 |
𝑥
= Vulnerable software versions