PT-2026-97620 · Gitlab · Gitlab

Chris Bonk

·

CVE-2026-92628

·

Published

2026-09-23

·

Updated

2026-09-29

CVSS v3.1

3.1

Low

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.6 through 19.2.6 GitLab CE/EE versions 19.3 through 19.3.2 GitLab CE/EE versions 19.4
Description A race condition exists in the shared state handling of the MCP search tool. This occurs when multiple processes access a shared resource concurrently without proper synchronization, which could lead to search results being returned under an incorrect user context.
Recommendations Update to version 19.2.7 or later. Update to version 19.3.3 or later. Update to version 19.4.1 or later.

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

BIT-GITLAB-2026-92628
CVE-2026-92628

Affected Products

Gitlab