CVE-2026-1751
Missing Authorization in GitLab
Summary
Missing Authorization in GitLab
Original description
The description as published by the source.
A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.8.0"},{"fixed":"18.5.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com