CVE-2026-6267

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1.0 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0

Description An issue in the internal request handling of GitLab Workhorse, the HTTP request handler for the GitLab platform, involves insufficient access controls. This flaw could allow an authenticated user with a Developer role to access unauthorized information, potentially impacting the confidentiality, integrity, and availability of protected data.

Recommendations Update GitLab CE/EE to version 19.0.5 or later. Update GitLab CE/EE to version 19.1.3 or later. Update GitLab CE/EE to version 19.2.1 or later.