PT-2026-40863 · Gitlab · Gitlab Ce/Ee

CVE-2026-3160 · Published 2026-05-14 · Updated 2026-05-18

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.7 through 18.9.6 GitLab CE/EE versions 18.10 through 18.10.5 GitLab CE/EE versions 18.11 through 18.11.2

Description An issue in the Jira integration filter allows an authenticated user to view Jira issues outside the configured project scope. This occurs because the filter functions only as a display control and fails to enforce the specified access boundaries.

Recommendations Update to version 18.9.7 Update to version 18.10.6 Update to version 18.11.3

Exploit

Fix

Weakness Enumeration

CWE-441

Related Identifiers

BDU:2026-07017

BIT-GITLAB-2026-3160

CVE-2026-3160

Affected Products

Gitlab Ce/Ee

References · 10

• 🔥 https://hackerone.com/reports/3566042 · Exploit
• https://ubuntu.com/security/CVE-2026-3160 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-2026-3160 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3160 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-3160 · Security Note
• https://bdu.fstec.ru/vul/2026-07017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-3160 · Security Note
• https://about.gitlab.com/releases/2026/05/13/patch-release-gitlab-18-11-3-released · Note
• https://twitter.com/VulmonFeeds/status/2054952452407845328 · Twitter Post
• https://gitlab.com/gitlab-org/gitlab/-/work_items/591354 · Note