PT-2026-120887

CVE-2026-14288

·

Published

2026-10-21

·

Updated

2026-10-22

Description by

CVSS 3.1
3.1
Low
MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-706: Use of Incorrectly-Resolved Name or Reference
Related identifiers
CVE-2026-14288
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com