CVE-2026-7767

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.11 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1

Description An issue exists in the Kubernetes proxy where improper redirect validation allows an authenticated user who controls a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server. This is an Open Redirect, which occurs when an application redirects a user to an external site without sufficient validation of the destination URL.

Recommendations Update GitLab CE/EE to version 19.2.8 or later. Update GitLab CE/EE to version 19.3.5 or later. Update GitLab CE/EE to version 19.4.2 or later.