PT-2026-52207 · Gitlab · Gitlab

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-8330

NVD

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed sensitive information to be written to application logs due to insufficient filtering in a CI/CD API endpoint.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-8330

Affected Products

Gitlab

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-8330 · Security Note
• https://gitlab.com/gitlab-org/gitlab/-/work_items/599621 · Note
• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released · Note