CVE-2026-86341

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.1 through 19.1.7 GitLab EE versions 19.2 through 19.2.5 GitLab EE versions 19.3 through 19.3.1

Description An issue exists where an authenticated user with Owner or Maintainer permissions can silently disable protected environment deployment approval requirements. This occurs due to improper access control checks performed after a protected resource is modified, which could allow unapproved deployments to reach production.

Recommendations Update GitLab EE versions 17.1 through 19.1.7 to version 19.1.8. Update GitLab EE versions 19.2 through 19.2.5 to version 19.2.6. Update GitLab EE versions 19.3 through 19.3.1 to version 19.3.2.