PT-2026-27784 · Gitlab · Gitlab Ce/Ee

CVE-2026-4363 · Publicado 2026-03-25 · Atualizado 2026-03-27

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab versions 18.1 through 18.8.7 GitLab versions 18.9 through 18.9.3 GitLab versions 18.10 through 18.10.1

Description An issue existed in GitLab EE where, under specific conditions, an authenticated user could obtain unauthorized access to resources. This was due to incorrect caching of authorization decisions.

Recommendations Update GitLab EE to version 18.8.7 or later. Update GitLab EE to version 18.9.3 or later. Update GitLab EE to version 18.10.1 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BDU:2026-06383

BIT-GITLAB-2026-4363

CVE-2026-4363

Produtos afetados

Gitlab Ce/Ee

Referências · 8

• https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-4363 · Nota de Segurança
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-10-1-released · Nota
• https://gitlab.com/gitlab-org/gitlab/-/work_items/578561 · Nota
• https://twitter.com/CVEarity/status/2037058166597562701 · Publicação no Twitter
• https://osv.dev/vulnerability/BIT-gitlab-2026-4363 · Aviso do Fabricante
• https://twitter.com/threatcluster/status/2037272274806448604 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-06383 · Nota de Segurança