CVE-2026-8667

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.6 through 19.0.5 GitLab CE/EE versions 19.1 through 19.1.3 GitLab CE/EE versions 19.2 through 19.2.1

Description Improper authorization checks could allow an authenticated user with a developer role to modify specific package registry metadata without possessing the necessary maintainer-level permissions.

Recommendations Update to version 19.0.6 or later. Update to version 19.1.4 or later. Update to version 19.2.2 or later.