Sensitive Token Exposure in GitLab CE/EE Versions
CVE-2026-7767

5.8MEDIUM

Key Information:

Vendor

Gitlab
Status
Gitlab
Vendor
CVE Published:
13 October 2026

What is CVE-2026-7767?

A security vulnerability exists in GitLab CE/EE affecting specific versions where an authenticated user, utilizing a Kubernetes agent, could inadvertently expose sensitive authentication tokens. This occurs due to improper validation of redirect requests within the Kubernetes proxy. When exploited, this flaw can redirect tokens to unintended servers, potentially compromising sensitive data. It's crucial for affected users to upgrade to the latest patched versions to mitigate any risks associated with this vulnerability.

Affected Version(s)

GitLab 13.11 < 19.2.8

GitLab 19.3 < 19.3.5

GitLab 19.4 < 19.4.2

References

https://gitlab.com/gitlab-org/gitlab/-/work_items/598965
https://hackerone.com/reports/3597095
technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-release-gi...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
.