CVE-2026-14351

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.8 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0

Description An improper authorization check in the mechanism used to generate headers for confidential issues allows an unauthenticated remote attacker to view the titles of confidential issues. This information disclosure occurs through metadata accessible via a publicly available merge request.

Recommendations Update GitLab CE/EE versions 8.8 through 19.0.4 to version 19.0.5. Update GitLab CE/EE versions 19.1 through 19.1.2 to version 19.1.3. Update GitLab CE/EE versions 19.2 through 19.2.0 to version 19.2.1.