CVE-2026-7427
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to improper input validation.
Risk Assessment
The risk is the possibility of a DoS attack by an unauthenticated attacker, which could disrupt the availability of GitLab services.
Recommendation
It is recommended to upgrade GitLab to version 19.0.6, 19.1.4, or 19.2.2 as soon as possible to eliminate the vulnerability.
Original NVD description (English source)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to improper input validation.