PT-2026-71198 · Gitlab · Gitlab Ce/Ee
CVE-2026-15423
·
Published
2026-08-12
·
Updated
2026-08-18
CVSS v3.1
8.5
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 19.0 through 19.0.5
GitLab CE/EE versions 19.1 through 19.1.3
GitLab CE/EE versions 19.2 through 19.2.1
Description
Improper authorization in pipeline reference validation allows an authenticated user with developer-role permissions to execute CI/CD pipelines on a protected branch without possessing the necessary push permissions.
Recommendations
Update GitLab CE/EE version 19.0 to 19.0.6.
Update GitLab CE/EE version 19.1 to 19.1.4.
Update GitLab CE/EE version 19.2 to 19.2.2.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab Ce/Ee