PT-2026-48646 · Gitlab · Gitlab Ce/Ee

CVE-2026-3553 · Published 2026-06-11 · Updated 2026-06-13

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.0 through 18.10.7 GitLab CE/EE versions 18.11 through 18.11.4 GitLab CE/EE versions 19.0 through 19.0.1

Description An issue exists where incorrect authorization checks could allow an authenticated user to access confidential issue details under certain conditions.

Recommendations Update to version 18.10.8 Update to version 18.11.5 Update to version 19.0.2

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BIT-GITLAB-2026-3553

CVE-2026-3553

Affected Products

Gitlab Ce/Ee

References · 7

• 🔥 https://hackerone.com/reports/3578216 · Exploit
• https://osv.dev/vulnerability/BIT-gitlab-2026-3553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3553 · Security Note
• https://gitlab.com/gitlab-org/gitlab/-/work_items/592295 · Note
• https://twitter.com/CVEnew/status/2065087730820727225 · Twitter Post
• https://about.gitlab.com/releases/2026/06/10/patch-release-gitlab-19-0-2-released · Note
• https://t.me/CVEtracker/56570 · Telegram Post