VENDOR

GitLab vulnerabilities: CVEs, exploitation and patches

Every GitLab CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-19650
GitLab GraphQL GET-request mutation execution vulnerability GitLab GitLab · Sep 29, 2026
- PoC PUBLIC
- PATCH AVAILABLE
HIGH 7.1
CVE-2026-10053
GitLab package registry path traversal leads to authenticated remote code execution GitLab GitLab · Sep 29, 2026
- PoC PUBLIC
- PATCH AVAILABLE
HIGH 8.8
CVE-2026-19478
GitLab GraphQL directive lets unauthenticated users modify public projects GitLab GitLab · Sep 29, 2026
- PoC PUBLIC
- PATCH AVAILABLE
CRITICAL 9.1
CVE-2026-85706
GitLab repository commits API path traversal lets unauthenticated read files GitLab Community Edition and Enterprise Edition · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
- PATCH AVAILABLE
CRITICAL 10