CVE-2026-16275
5.3MediumPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-863
Impact
Unauthenticated remote attackers can read confidential notes on public projects over the network. They require no privileges or user interaction to view the restricted data.
Root cause
Incorrect authorization checks fail to properly restrict read access to confidential notes under specific conditions.
Affected systems
GitLab CE/EE versions 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Fix & remediation
Upgrade GitLab CE/EE to 19.2.8, 19.3.5, 19.4.2, or later. If upgrading immediately is not possible, restrict public project visibility to internal or private as an interim mitigation.
$ sudo apt-get update && sudo apt-get install --only-upgrade gitlab-eeAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.
References
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/Release NotesVendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/work_items/606490Issue Tracking
- https://hackerone.com/reports/3815259Permissions Required