PT-2026-52197 · Gitlab · Gitlab

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-11379

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-11379

Affected Products

Gitlab

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-11379 · Security Note
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released · Note
• https://gitlab.com/gitlab-org/gitlab/-/work_items/517659 · Note