CVE-2026-1724

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.5 through 18.8.6 GitLab EE versions 18.9 through 18.9.2 GitLab EE versions 18.10 through 18.10.0

Description An improper access control issue existed in GitLab EE that allowed an unauthenticated user to access API tokens of self-hosted AI models. The issue affected the access control mechanisms related to AI model API tokens.

Recommendations Update GitLab EE to version 18.8.7 or later. Update GitLab EE to version 18.9.3 or later. Update GitLab EE to version 18.10.1 or later.