gitlabCVE-2026-92874
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.
Medium5.4CVE-2026-92874 · Published Sep 24, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| GitLab Vendor | >= 18.3, < 19.2.7 | 19.2.7 |
| >= 19.3, < 19.3.3 | 19.3.3 | |
| >= 19.4, < 19.4.1 | 19.4.1 |
Details and references
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due to improper authorization checks.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- Severity from
- no source yet
- Weakness
- CWE-863
More gitlab advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-89078Critical9.9fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | Critical9.9 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |
| Sep 24 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-92470High7.7fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | High7.7 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |
| Sep 24 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-92529Medium4.3fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | Medium4.3 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |
| Sep 24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-92530Medium4.3fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | Medium4.3 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |
| Sep 24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-92628Low3.1fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | Low3.1 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |
| Sep 24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4. CVE-2026-93577Critical9.9fixed in GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 | Critical9.9 | GitLab 19.2.7, GitLab 19.3.3, GitLab 19.4.1 |