Zetlyn
GitHubGet started

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 t…

cve CVE-2026-4523 2 sources, 2 claims · Watch

NVD writes:
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API. the claim
Severity
low GitHub advisories
LOW NVD
CVSS
3.7 GitHub advisories
3.7 NVD
Fixed in
19.2.7, 19.3.3, 19.4.1 NVD
Vendor
GitLab NVD
Product
GitLab NVD
CWE
CWE-862 GitHub advisories
CWE-862 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2026-09-29first spoke of it: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7,...GitHub advisories
2026-09-29first spoke of it: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.NVD

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.

What it is to other things

affectsgitlab/gitlab
NVD
made_bygitlab
NVD
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDno
At least one of those steps needs a person.
receipt
Source
NVD
Its words
no
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCno
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
GitHub advisories3.7
receipt
Source
GitHub advisories
Its words
3.7
Read by
field:cvss.score
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-4523",
  "cvss": {
    "score": 3.7,
    "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 3.7,
      "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-862",
      "name": "Missing Authorization"
    }
  ],
  "description": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.",
  "epss": {
    "percentage": 0.00345,
    "percentile": 0.2554
  },
  "ghsa_id": "GHSA-75vf-vmx4-frc7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-75vf-vmx4-frc7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-75vf-vmx4-frc7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-4523"
    }
  ],
  "nvd_published_at": "2026-09-29T10:17:11Z",
  "published_at": "2026-09-29T12:31:29Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-4523",
    "https://hackerone.com/reports/3590929",
    "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released",
    "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294",
    "https://github.com/advisories/GHSA-75vf-vmx4-frc7"
  ],
  "repository_advisory_url": null,
  "severity": "low",
  "source_code_location": "",
  "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7,...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T12:31:33Z",
  "url": "https://api.github.com/advisories/GHSA-75vf-vmx4-frc7",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
CVSS
cvss
NVD3.7
receipt
Source
NVD
Its words
3.7
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-09-29 10:35 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
receipt
Source
NVD
Its words
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
GitHub advisoriesCWE-862
receipt
Source
GitHub advisories
Its words
CWE-862
Read by
field:cwes[].cwe_id
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-4523",
  "cvss": {
    "score": 3.7,
    "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 3.7,
      "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-862",
      "name": "Missing Authorization"
    }
  ],
  "description": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.",
  "epss": {
    "percentage": 0.00345,
    "percentile": 0.2554
  },
  "ghsa_id": "GHSA-75vf-vmx4-frc7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-75vf-vmx4-frc7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-75vf-vmx4-frc7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-4523"
    }
  ],
  "nvd_published_at": "2026-09-29T10:17:11Z",
  "published_at": "2026-09-29T12:31:29Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-4523",
    "https://hackerone.com/reports/3590929",
    "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released",
    "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294",
    "https://github.com/advisories/GHSA-75vf-vmx4-frc7"
  ],
  "repository_advisory_url": null,
  "severity": "low",
  "source_code_location": "",
  "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7,...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T12:31:33Z",
  "url": "https://api.github.com/advisories/GHSA-75vf-vmx4-frc7",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
CWE
cwe
NVDCWE-862
receipt
Source
NVD
Its words
CWE-862
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCCWE-862
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCnone
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Fixed in
fixed_in
NVD19.2.7, 19.3.3, 19.4.1
receipt
Source
NVD
Its words
19.2.7, 19.3.3, 19.4.1
Read by
field:cve.affected[].affectedData[].versions[status=affected].lessThan
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTC19.2.7, 19.3.3, 19.4.1
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDGitLab
receipt
Source
NVD
Its words
GitLab
Read by
field:cve.affected[].affectedData[].product
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCGitLab
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
GitHub advisorieslow
Below 4.0.
receipt
Source
GitHub advisories
Its words
low
Read by
field:severity
Said since
2026-10-02 11:59 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-4523",
  "cvss": {
    "score": 3.7,
    "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 3.7,
      "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-862",
      "name": "Missing Authorization"
    }
  ],
  "description": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.",
  "epss": {
    "percentage": 0.00345,
    "percentile": 0.2554
  },
  "ghsa_id": "GHSA-75vf-vmx4-frc7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-75vf-vmx4-frc7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-75vf-vmx4-frc7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-4523"
    }
  ],
  "nvd_published_at": "2026-09-29T10:17:11Z",
  "published_at": "2026-09-29T12:31:29Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-4523",
    "https://hackerone.com/reports/3590929",
    "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released",
    "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294",
    "https://github.com/advisories/GHSA-75vf-vmx4-frc7"
  ],
  "repository_advisory_url": null,
  "severity": "low",
  "source_code_location": "",
  "summary": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7,...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T12:31:33Z",
  "url": "https://api.github.com/advisories/GHSA-75vf-vmx4-frc7",
  "vulnerabilities": [],
  "withdrawn_at": null
}
—
Severity
severity
NVDLOW
From 0.1 to 3.9.
receipt
Source
NVD
Its words
LOW
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCLOW
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
low
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-10-05 18:25 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-05 18:25 UTCAnalyzed
2026-10-02 12:00 UTCUndergoing Analysis
2026-09-29 10:35 UTCReceived
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDpartial
The attacker gains limited control, or limited information.
receipt
Source
NVD
Its words
partial
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 12:31 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:31 UTCpartial
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDGitLab
receipt
Source
NVD
Its words
GitLab
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCGitLab
2026-09-29 10:35 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "cpes": [
              "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "GitLab",
            "repo": "https://gitlab.com/gitlab-org/gitlab",
            "vendor": "GitLab",
            "versions": [
              {
                "lessThan": "19.2.7",
                "status": "affected",
                "version": "15.11",
                "versionType": "semver"
              },
              {
                "lessThan": "19.3.3",
                "status": "affected",
                "version": "19.3",
                "versionType": "semver"
              },
              {
                "lessThan": "19.4.1",
                "status": "affected",
                "version": "19.4",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "cve@gitlab.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "A3E2F17F-DCD8-42F0-A0E0-0E8C94E54E11",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "734CD20A-2604-47CF-B44C-2742B231A76D",
                "versionEndExcluding": "19.2.7",
                "versionStartIncluding": "15.11.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                "matchCriteriaId": "053EF913-CD59-404C-8878-B42B122608DD",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "FDD16091-261D-4616-BF85-70CF011C6740",
                "versionEndExcluding": "19.3.3",
                "versionStartIncluding": "19.3.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:community:*:*:*",
                "matchCriteriaId": "476CE485-460C-4EBE-AC16-D7AE6C30DF50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:gitlab:gitlab:19.4.0:*:*:*:enterprise:*:*:*",
                "matchCriteriaId": "DED8DBAE-9FCD-40A4-9A9B-BAC26B4CBD44",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API."
      }
    ],
    "id": "CVE-2026-4523",
    "lastModified": "2026-10-05T17:07:31.000",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 1.4,
          "source": "cve@gitlab.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-4523",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-09-29T12:41:03.133153Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-09-29T10:17:11.613",
    "references": [
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Broken Link"
        ],
        "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/594294"
      },
      {
        "source": "cve@gitlab.com",
        "tags": [
          "Permissions Required"
        ],
        "url": "https://hackerone.com/reports/3590929"
      }
    ],
    "sourceIdentifier": "cve@gitlab.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-862"
          }
        ],
        "source": "cve@gitlab.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper authorization enforcement in the GraphQL API.
zetlyn/cve-nvd · 2026-09-29
automatable no cvss 3.7 cvss_vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N cwe CWE-862 exploitation none fixed_in 19.2.7, 19.3.3, 19.4.1 product GitLab severity LOW status Analyzed technical_impact partial vendor GitLab source
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7,...
zetlyn/cve-ghsa · 2026-09-29
cvss 3.7 cwe CWE-862 severity low source