GitLab Multiple Vulnerabilities

Release Date: 19 Aug 2026

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation and security restriction bypass on the targeted system.

---

Impact

• Security Restriction Bypass
• Data Manipulation

---

System / Technologies affected

• GitLab Community Edition (CE) versions prior to 19.2.4, 19.1.6, 19.0.8, 18.11.11
• GitLab Enterprise Edition (EE) versions prior to 19.2.4, 19.1.6, 19.0.8, 18.11.11

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

---

Vulnerability Identifier

• CVE-2026-19478
• CVE-2026-19650

---

Source

• GitLab

---

Related Link

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/