GitLab CE/EE EUVD-2026-98217

Exploitation requires a GitLab CE/EE instance running an affected version (19.2-19.2.7, 19.3-19.3.4, or 19.4-19.4.1) that hosts public projects containing internal notes or confidential system notes; the attacker queries these through the GraphQL API, which fails to properly enforce authorization under certain conditions. No authentication is required (PR:N), but the exposure is inherently limited: only public projects are affected, only note content is readable (no write or service impact), and instances already patched to 19.2.8 / 19.3.5 / 19.4.2 or later are not vulnerable. Internet-exposed, unpatched instances with active public projects face the highest realistic risk.

This is a moderate-severity information-disclosure flaw (CVSS 5.3) rooted in improper authorization (CWE-863) in GitLab's GraphQL API. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) is internally consistent and signals a network-reachable, low-complexity, unauthenticated issue with only a limited confidentiality impact and no integrity or availability impact - explaining the mid-range 5.3 rather than a critical rating. Publicly available exploit code exists (referenced HackerOne report #3975416), which raises the practical likelihood of opportunistic testing, but this is NOT confirmed active exploitation: the CVE is not listed in CISA KEV and no EPSS score was provided in the input, so widespread in-the-wild abuse cannot be asserted. The bug was reported by GitLab itself and patched across the affected branches, consistent with responsible disclosure rather than observed attacks. Net assessment: a real but bounded priority - the unauthenticated network vector plus a public POC warrant prompt patching for internet-exposed GitLab instances, yet the impact is confined to reading internal and confidential system notes on public projects, with no data modification or service disruption, so it is not a drop-everything critical. No signals directly conflict; the main gap is the absence of EPSS/KEV data to gauge real-world exploitation velocity.

An unauthenticated attacker sends crafted GraphQL queries over the network to a vulnerable GitLab instance hosting public projects, retrieving internal notes and confidential system notes that should be restricted to authorized members. Because publicly available exploit code exists (HackerOne report), the technique can be reproduced with low effort and no authentication, though the leaked data is limited to note contents rather than full repository or credential access.