Cache Poisoning Vulnerability in GitLab CE/EE Affects Multiple Versions
CVE-2026-112212

7.5HIGH

Key Information:

Vendor

Gitlab
Status
Gitlab
Vendor
CVE Published:
21 October 2026

What is CVE-2026-112212?

A vulnerability exists in GitLab CE/EE where improper trust in user-supplied values can allow an unauthenticated user to poison the shared cache's OAuth/OIDC discovery document. This could lead to the redirection of certain authentication flows to an externally controlled server. The issue was identified in GitLab versions prior to the specified patches, highlighting the need for users to update their installations promptly to mitigate potential security risks.

Affected Version(s)

GitLab 18.3 < 19.3.6

GitLab 19.4 < 19.4.3

GitLab 19.5 < 19.5.1

References

https://gitlab.com/gitlab-org/gitlab/-/work_items/627499
https://docs.gitlab.com/releases/patches/patch-release-gi...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability has been discovered internally by GitLab team member Peter Arts
.