CyberRota Analysis
AI-GeneratedGitLab CE/EE versions prior to 19.2.7, 19.3.3, and 19.4.1 are vulnerable due to a race condition in the MCP search tool, which may lead to search results being displayed under an incorrect user context. This could potentially expose sensitive information to unauthorized users. Organizations using affected versions should prioritize updating to mitigate the risk of unintended data exposure.
CVE
CVE-2026-92628
Severity
LOW
CVSS
3.1
EPSS
N/A
GitLab
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context.
Related CVEs
Other vulnerabilities affecting the same vendor(s)