PT-2026-1713 · Gitlab · Gitlab Ce/Ee+1
CVE-2025-13761
·
Published
2026-01-07
·
Updated
2026-06-30
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 18.6 before 18.6.3
GitLab CE/EE versions 18.7 before 18.7.1
Description
An issue in GitLab CE/EE could allow an unauthenticated user to execute arbitrary code in the context of an authenticated user's browser. This is achieved by convincing the legitimate user to visit a specially crafted webpage. The issue impacts GitLab Community Edition (CE) and Enterprise Edition (EE).
Recommendations
Update GitLab CE/EE to version 18.6.3 or later.
Update GitLab CE/EE to version 18.7.1 or later.
Exploit
Fix
RCE
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab
Gitlab Ce/Ee