PT-2026-21997 · Gitlab · Gitlab Ce/Ee

Modhanami · Publicado 2026-02-25 · Atualizado 2026-03-02 · CVE-2026-1747

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.11 through 18.7.4 GitLab EE versions 18.8 through 18.8.4 GitLab EE versions 18.9 through 18.9.0

Description A flaw existed in GitLab EE that, under specific circumstances, could have allowed Developer-role users with limited permissions to perform unauthorized changes to protected Conan packages.

Recommendations Update GitLab EE to version 18.7.5 or later. Update GitLab EE to version 18.8.5 or later. Update GitLab EE to version 18.9.1 or later.

Exploit

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

BDU:2026-03429

BIT-GITLAB-2026-1747

CVE-2026-1747

Produtos afetados

Gitlab Ce/Ee

Referências · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1747.json · Exploit
• 🔥 https://hackerone.com/reports/3533088 · Exploit
• https://cve.org/CVERecord?id=CVE-2026-1747 · Nota de Segurança
• https://osv.dev/vulnerability/BIT-gitlab-2026-1747 · Aviso do Fabricante
• https://gitlab.com/gitlab-org/gitlab/-/issues/588385 · Nota
• https://bdu.fstec.ru/vul/2026-03429 · Nota de Segurança
• https://ubuntu.com/security/CVE-2026-1747 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2027099283296800771 · Publicação no Twitter
• https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1747 · Aviso do Fabricante
• https://t.me/cveNotify/153622 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1747 · Nota de Segurança
• https://t.me/CVEtracker/45761 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-1747 · Aviso do Fabricante