CVE-2026-15387

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.1 through 19.1.6 GitLab EE versions 19.2 through 19.2.4 GitLab EE versions 19.3 through 19.3.0

Description An issue exists where an authenticated user with developer-role permissions can influence the execution environment of Pipeline Execution Policy enforcement jobs. This occurs due to improper handling of job dependencies.

Recommendations Update GitLab EE version 19.1 to 19.1.7. Update GitLab EE version 19.2 to 19.2.5. Update GitLab EE version 19.3 to 19.3.1.