PT-2026-3860

CVE-2026-1102

Published

2026-01-21

Updated

2026-01-27

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.3 through 18.6.3 GitLab CE/EE versions 18.7 through 18.7.1 GitLab CE/EE versions 18.8 through 18.8.1

Description GitLab CE/EE is susceptible to a denial of service condition. An unauthenticated user can trigger this by sending repeated malformed SSH authentication requests.

Recommendations Update GitLab CE/EE to version 18.6.4 or later. Update GitLab CE/EE to version 18.7.2 or later. Update GitLab CE/EE to version 18.8.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ahacker1

Thiago Figueiró

Vendors

Affected products

Weakness enumeration

CWE-770: Allocation of Resources Without Limits or Throttling

Related identifiers