CVE-2026-79708

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.0 through 19.1.7 GitLab EE versions 19.2 through 19.2.5 GitLab EE versions 19.3 through 19.3.1

Description Insufficient scope validation allows an authenticated user with developer permissions to execute a policy test pipeline on projects within their group. This can lead to unauthorized access to protected CI/CD variables that are restricted to roles with higher privileges.

Recommendations Update GitLab EE versions 19.0 through 19.1.7 to version 19.1.8. Update GitLab EE versions 19.2 through 19.2.5 to version 19.2.6. Update GitLab EE versions 19.3 through 19.3.1 to version 19.3.2.