PT-2026-44066 · Gitlab · Gitlab Ce/Ee

Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-1402

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.1 through 18.10.6 GitLab CE/EE versions 18.11 through 18.11.3 GitLab CE/EE versions 19.0 through 19.0.0

Description An issue exists where an authenticated user can cause a denial of service due to insufficient validation under certain conditions.

Recommendations Update to version 18.10.7 Update to version 18.11.4 Update to version 19.0.1

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-07481

BIT-GITLAB-2026-1402

CVE-2026-1402

Affected Products

Gitlab Ce/Ee

References · 11

• 🔥 https://hackerone.com/reports/3517283 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1402 · Security Note
• https://ubuntu.com/security/CVE-2026-1402 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1402 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1402 · Security Note
• https://bdu.fstec.ru/vul/2026-07481 · Security Note
• https://osv.dev/vulnerability/BIT-gitlab-2026-1402 · Vendor Advisory
• https://t.me/cveNotify/164932 · Telegram Post
• https://gitlab.com/gitlab-org/gitlab/-/work_items/587569 · Note
• https://about.gitlab.com/releases/2026/05/27/patch-release-gitlab-19-0-1-released · Note
• https://twitter.com/CVEnew/status/2059718108944929028 · Twitter Post