GitLab vulnerabilities and fixes

CVEs that mention GitLab, ranked by priority. 17 tracked.

GitLab has 17 tracked vulnerabilities, 3 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 6. Most recent: 2026-10-22. Highest priority: CVE-2026-85706 (score 98/100).

• CVE-2026-85706 CRITICAL 10.0 EXPLOITED UPGRADE GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
• CVE-2026-110264 CRITICAL 10.0 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0
• CVE-2022-51026 CRITICAL 9.8 Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attac
• CVE-2026-15723 HIGH 8.2 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.
• CVE-2026-106462 MEDIUM 6.4 UPGRADE UPGRADE Backstage is an open framework for building developer portals
• CVE-2026-112212 HIGH 7.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.
• CVE-2026-12664 MEDIUM 6.8 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.
• CVE-2026-106463 MEDIUM 5.4 UPGRADE UPGRADE Backstage is an open framework for building developer portals
• CVE-2026-16255 MEDIUM 5.9 GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3
• CVE-2026-70444 MEDIUM 4.3 A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers
• CVE-2026-105777 MEDIUM 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 1
• CVE-2026-13319 MEDIUM 4.3 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19
• CVE-2026-112378 MEDIUM 4.3 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3
• CVE-2026-105711 LOW 3.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.
• CVE-2026-14288 LOW 3.1 GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3
• CVE-2026-103515 LOW 2.7 GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3
• CVE-2026-112326 LOW 3.1 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3

FAQ

How do I fix GitLab vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is GitLab being exploited right now?

Yes: 1 GitLab CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which GitLab CVE should I patch first?

CVE-2026-85706 currently ranks highest (98/100): GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability.

← Back to latest CVEs