Improper Authorization in GitLab CE/EE Affects Multiple Versions

CVE-2025-12555

What is CVE-2025-12555?

An issue has been identified in GitLab CE/EE that could potentially allow authenticated users to gain unauthorized access to sensitive pipeline job information. This vulnerability arises from inadequate authorization checks within projects where both repository and CI/CD functionalities are disabled. Specifically, users may exploit this flaw to retrieve information from previous pipeline jobs, exposing internal data that should remain confidential. GitLab has recognized and patched this issue in recent updates, ensuring improved security measures for its users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References