CVE-2025-7736

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.9 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1

Description An authenticated attacker could bypass access control restrictions and view GitLab Pages content intended only for project members. This was achieved by authenticating through OAuth providers. The issue affects GitLab CE/EE.

Recommendations Update GitLab CE/EE to version 18.3.6 or later. Update GitLab CE/EE to version 18.4.4 or later. Update GitLab CE/EE to version 18.5.2 or later.