Unauthorized Access Vulnerability in GitLab CE/EE Products by GitLab
CVE-2026-1182

4.3MEDIUM

Key Information:

Vendor: Gitlab
Status: Gitlab
Vendor: CVE Published:; 12 March 2026

What is CVE-2026-1182?

A vulnerability in GitLab CE/EE allows authenticated users to potentially gain unauthorized access to confidential issue titles within public projects under specific circumstances. This weakness could be exploited to view sensitive information that should not be accessible, thus affecting the integrity and confidentiality of project data. GitLab has since addressed this issue across the affected versions to enhance security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GitLab 8.14 < 18.7.6

GitLab 18.8 < 18.8.6

GitLab 18.9 < 18.9.2

References

https://gitlab.com/gitlab-org/gitlab/-/work_items/586613

https://hackerone.com/reports/3515716

technical-descriptionexploitpermissions-required

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Mar 12, 2026
Vulnerability Reserved
Jan 19, 2026

Credit

Thanks [yvvdwf](https://hackerone.com/yvvdwf) for reporting this vulnerability through our HackerOne bug bounty program

JSON

Gitlab