Gitlab · Gitlab Ce/Ee · CVE-2025-6769
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 15.1 through 18.1.5
GitLab CE/EE versions 18.2 through 18.2.5
GitLab CE/EE versions 18.3 through 18.3.1
Description:
An issue exists in GitLab CE/EE that could allow authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces.
Recommendations:
Update GitLab CE/EE to version 18.1.6 or later.
Update GitLab CE/EE to version 18.2.6 or later.
Update GitLab CE/EE to version 18.3.2 or later.