PT-2026-52197 · Gitlab · Gitlab Ce/Ee

Modestia

·

CVE-2026-11379

·

Published

2026-06-24

·

Updated

2026-06-29

CVSS v3.1

5.3

Medium

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.11 through 18.11.5 GitLab EE versions 19.0 through 19.0.2 GitLab EE versions 19.1
Description Incorrect authorization in DAST (Dynamic Application Security Testing) site profile management allows a user with the Developer role to exfiltrate DAST site profile secrets under certain conditions.
Recommendations Update GitLab EE versions 13.11 through 18.11.5 to 18.11.6. Update GitLab EE versions 19.0 through 19.0.2 to 19.0.3. Update GitLab EE version 19.1 to 19.1.1.

Exploit

Fix

DoS

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-08987
BIT-GITLAB-2026-11379
CVE-2026-11379

Affected Products

Gitlab Ce/Ee