PT-2026-65873 · Gitlab · Gitlab Ce/Ee

Henrik Sandberg

·

CVE-2026-13113

·

Published

2026-07-29

·

Updated

2026-08-17

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.0 through 19.0.4 GitLab EE versions 19.1 through 19.1.2 GitLab EE versions 19.2 through 19.2.0
Description A race condition in approval rule processing may allow an authenticated user to merge code into a protected branch without obtaining the necessary approvals.
Recommendations Update GitLab EE versions 17.0 through 19.0.4 to version 19.0.5. Update GitLab EE versions 19.1 through 19.1.2 to version 19.1.3. Update GitLab EE versions 19.2 through 19.2.0 to version 19.2.1.

Exploit

Fix

Time Of Check To Time Of Use

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-367

Related Identifiers

BIT-GITLAB-2026-13113
CVE-2026-13113

Affected Products

Gitlab Ce/Ee