CVE-2025-12571: Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads.
Other sources
GitLab has remediated an issue that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-12571?
CVE-2025-12571 is classified as a Denial of Service vulnerability that affects multiple versions of GitLab.
How do I fix CVE-2025-12571?
To fix CVE-2025-12571, upgrade GitLab to version 18.4.5, 18.5.3, or 18.6.1.
Which versions of GitLab are affected by CVE-2025-12571?
CVE-2025-12571 affects GitLab CE/EE versions from 17.10 up to but not including 18.4.5, 18.5 up to but not including 18.5.3, and 18.6 up to but not including 18.6.1.
What potential impact does CVE-2025-12571 have on systems?
CVE-2025-12571 can allow unauthenticated users to cause a Denial of Service condition by sending specifically crafted requests.
Is there a workaround for CVE-2025-12571 pending a fix?
There is no official workaround recommended for CVE-2025-12571, and upgrading to the fixed versions is advised.