CVE-2026-14341

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.8 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0

Description Improper authorization in a projects API endpoint allows an authenticated user with the Maintainer role to modify protected branch configuration. This issue stems from flaws in the authorization procedure of the protected branches configuration handler.

Recommendations Update GitLab CE/EE versions 12.8 through 19.0.4 to version 19.0.5. Update GitLab CE/EE versions 19.1 through 19.1.2 to version 19.1.3. Update GitLab CE/EE versions 19.2 through 19.2.0 to version 19.2.1.