What is the CVSS score of CVE-2026-4672?

CVE-2026-4672 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-4672?

Yes, a public proof-of-concept exploit is available for CVE-2026-4672. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-4672?

Yes, a patch is available for CVE-2026-4672. Update the affected software to the latest version immediately.

GitLab CE/EE CVE-2026-4672

EUVD-2026-50485 MEDIUM

Missing Authorization (CWE-862)

2026-07-29 GitLab

GHSA-8jc8-cvqj-p926

Gitlab Authentication Bypass

4.3

CVSS 3.1 · Vendor: GitLab

Severity by source

Vendor (GitLab) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network-accessible, guest-authenticated read-only access with no scope change, integrity, or availability impact; C:L reflects limited test report disclosure.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitLab).

CVSS VectorVendor: GitLab

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 29, 2026 - 20:02 EUVD

Analysis Generated

Jul 29, 2026 - 20:01 vuln.today

CVE Published

Jul 29, 2026 - 19:01 cve.org

MEDIUM 4.3

DescriptionCVE.org

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-role permissions to access test report contents they were not authorized to view due to improper access control enforcement.

AnalysisAI

Improper access control in GitLab CE/EE exposes CI/CD test report contents to authenticated users holding only guest-role permissions, allowing unauthorized read access to data from projects they should not be able to view. Affected versions span 18.4 through pre-19.0.5, 19.1 through pre-19.1.3, and 19.2 through pre-19.2.1. Publicly available exploit code exists via a disclosed HackerOne report, though no active exploitation has been confirmed by CISA KEV at time of analysis.

Technical ContextAI

GitLab CE/EE is a self-hosted and SaaS DevSecOps platform with role-based access controls (guest, reporter, developer, maintainer, owner) enforced at the project level. CWE-862 (Missing Authorization) identifies the root cause: the application fails to verify whether the requesting user holds sufficient authorization before returning test report data. Test reports are CI/CD pipeline artifacts generated during automated test runs and may contain sensitive build metadata, test names, file paths, or environment details. The flaw is scoped to the test reports feature specifically, as the broader GitLab RBAC system functions correctly for other resources. CPE cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* covers both Community Edition and Enterprise Edition installs.

RemediationAI

Upgrade self-managed GitLab instances to version 19.0.5, 19.1.3, or 19.2.1, as documented in the GitLab patch release advisory at https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/. GitLab.com SaaS has already been patched. As a compensating control prior to patching, administrators should audit all project memberships to identify guest-role users on projects containing sensitive CI/CD pipelines and consider temporarily removing guest access or disabling test report visibility at the project level. Restricting pipeline feature access for guest roles via GitLab's project settings (Settings > General > Visibility, Pipelines, Features) can limit exposure but may affect legitimate workflows. No official workaround short of the patch is documented by the vendor.