CVE-2025-7659

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2 through 18.6.6 GitLab CE/EE versions 18.7 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4

Description An issue exists in GitLab CE/EE related to incomplete validation within the Web IDE. This could allow an unauthenticated user to obtain tokens and gain access to private repositories. The issue stems from a flaw in the source verification mechanism.

Recommendations GitLab versions 18.2 through 18.6.6 should be updated to version 18.6.7 or later. GitLab versions 18.7 through 18.7.4 should be updated to version 18.7.5 or later. GitLab versions 18.8 through 18.8.4 should be updated to version 18.8.5 or later.