SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-6336

MEDIUM · CVSS 5.3 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

GitLab versions prior to 19.0.5, 19.1.3, and 19.2.1 are vulnerable to a flaw that may permit unauthorized users to access project import source information due to inadequate authorization checks. This could lead to potential data exposure, impacting organizations that rely on GitLab for project management and collaboration. Users of affected versions should prioritize applying the latest updates to mitigate this risk.

CVE
CVE-2026-6336
Severity
MEDIUM
CVSS
5.3
EPSS
0.26%
GitLab

Original NVD Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check.

Related CVEs

Other vulnerabilities affecting the same vendor(s)