Access Control Bypass in GitLab CE/EE by Authenticated Users
CVE-2025-7736

3.1LOW

Key Information:

Vendor

Gitlab
Status
Gitlab
Vendor
CVE Published:
15 November 2025

What is CVE-2025-7736?

GitLab has addressed a vulnerability in GitLab CE/EE allowing an authenticated attacker to bypass access control measures. This flaw could permit unauthorized viewing of GitLab Pages content designated for project members, specifically when authentication was achieved through OAuth providers. The issue affects multiple versions and highlights significant security implications for project confidentiality.

Affected Version(s)

GitLab 17.9 < 18.3.6

GitLab 18.4 < 18.4.4

GitLab 18.5 < 18.5.2

References

https://about.gitlab.com/releases/2025/11/12/patch-releas...
https://gitlab.com/gitlab-org/gitlab/-/issues/556098
issue-trackingpermissions-required
https://hackerone.com/reports/3250156
technical-descriptionexploitpermissions-required

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks [mateuszek](https://hackerone.com/mateuszek) for reporting this vulnerability through our HackerOne bug bounty program
JSON
.
CVE-2025-7736 : Access Control Bypass in GitLab CE/EE by Authenticated Users