PT-2026-32415 · Bitnami · Gitlab

Publicado 2026-04-13 · Atualizado 2026-04-13

OSV

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user with auditor privileges to modify vulnerability flag data in private projects due to incorrect authorization.

Identificadores relacionados

BIT-GITLAB-2026-2619

Produtos afetados

Gitlab

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-2619 · Nota de Segurança
• https://hackerone.com/reports/3554982 · Nota
• https://gitlab.com/gitlab-org/gitlab/-/work_items/590430 · Nota
• https://osv.dev/vulnerability/BIT-gitlab-2026-2619 · Aviso do Fabricante
• https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released · Nota