AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-16627

HIGH · CVSS 7.7 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

GitLab CE/EE versions prior to 19.2.2 are vulnerable to a privilege escalation flaw that allows authenticated users with developer-role permissions to exploit improper sanitization of HTML content in CI job modals. This could lead to unauthorized access and control over sensitive resources within the application. Organizations using affected versions should prioritize remediation to mitigate potential security risks.

CVE
CVE-2026-16627
Severity
HIGH
CVSS
7.7
EPSS
0.30%
GitLab

Original NVD Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper sanitization of HTML content rendered in a CI job modal.