Skip to main content

GitLab EE CVE-2026-16494

| EUVDEUVD-2026-57436 HIGH
Missing Authorization (CWE-862)
2026-08-12 GitLab GHSA-gww4-7jfh-v6mj
Gitlab Authentication Bypass
7.1
CVSS 3.1 · Vendor: GitLab
Share

Severity by source

Vendor (GitLab) PRIMARY
7.1 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
vuln.today AI
7.1 HIGH

Network-exploitable by any authenticated project member (PR:L, AV:N, AC:L); no confidentiality impact; high integrity loss from unrestricted project-settings writes; minor availability disruption.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (GitLab).

CVSS VectorVendor: GitLab

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
Low

Lifecycle Timeline

3
Patch available
Aug 12, 2026 - 20:03 EUVD
Analysis Generated
Aug 12, 2026 - 19:50 vuln.today
CVE Published
Aug 12, 2026 - 19:04 cve.org
HIGH 7.1

DescriptionCVE.org

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privileged roles, due to missing authorization checks on a project update endpoint.

Articles & Coverage 2

News 6 New GitLab Vulnerabilities - 6 High Severity, 5 With POC Aug 13, 2026 News 6 New GitLab Vulnerabilities - 6 High Severity, 5 With POC Aug 12, 2026

AnalysisAI

Privilege escalation in GitLab Enterprise Edition exposes project governance controls to any authenticated project member due to missing authorization checks on the project update API endpoint. Affecting EE versions 19.1.0 through 19.1.3 and 19.2.0 through 19.2.1, this flaw lets lower-privileged users (developers, reporters) silently overwrite project settings normally restricted to maintainers or owners - including branch protection rules, merge approval requirements, and access policies. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Authenticate as low-privileged project member
Delivery
Identify target project with sensitive settings
Exploit
Send crafted API request to project update endpoint
Execution
Bypass missing authorization check
Persist
Overwrite protected branch or approval policy
Impact
Merge unauthorized code change into production branch
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid GitLab EE account with at least reporter or developer membership in the target project - no higher privilege is needed. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The NVD CVSS 7.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) accurately captures the core threat: network-reachable, no special configuration required, low-privilege authentication sufficient, high integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with developer-level access to a GitLab EE project - obtained via a compromised account, a malicious insider, or a newly invited contractor - sends a crafted API request to the project update endpoint referencing the publicly available exploit details on HackerOne (https://hackerone.com/reports/3775445). The authorization check is skipped, allowing the attacker to disable required merge-request approvals on the main branch. …
Remediation Upgrade GitLab EE to version 19.1.4 (for 19.1.x installs) or 19.2.2 (for 19.2.x installs), as documented in the vendor patch release advisory at https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all GitLab Enterprise Edition instances running versions 19.1.0-19.1.3 or 19.2.0-19.2.1 and audit project membership to catalog all users with developer or reporter roles. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Gitlab

View all
CVE-2021-22205 CRITICAL POC
10.0 Apr 23

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. Rated critical severity (CVSS 10
CVE-2023-7028 CRITICAL POC
10.0 Jan 12

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.
CVE-2013-4490 MEDIUM POC
6.5 May 13

The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x
CVE-2022-2992 CRITICAL POC
9.9 Oct 17

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows
CVE-2018-18843 CRITICAL POC
10.0 Dec 04

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
CVE-2024-45409 CRITICAL POC
9.8 Sep 10

The Ruby SAML library is for implementing the client side of a SAML authorization. Rated critical severity (CVSS 9.8), t
CVE-2022-1162 CRITICAL POC
9.8 Apr 04

A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. Rated critical severity (CVSS 9.8)
CVE-2022-0735 CRITICAL POC
9.8 Mar 28

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions star
CVE-2021-22175 CRITICAL POC
9.8 Jun 11

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af
CVE-2021-22203 CRITICAL POC
9.8 Apr 02

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions sta
CVE-2019-15741 CRITICAL POC
9.8 Sep 16

An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2019-6960 CRITICAL POC
9.8 Sep 09

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-16494 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy