CVE-2025-13927: Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with malformed authentication data.
Other sources
GitLab has remediated an issue that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with malformed authentication data.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-13927?
CVE-2025-13927 is classified as a denial of service vulnerability which can significantly impact the availability of GitLab.
How do I fix CVE-2025-13927?
To remediate CVE-2025-13927, update your GitLab installation to version 18.6.4, 18.7.2, or 18.8.2.
Which versions of GitLab are affected by CVE-2025-13927?
CVE-2025-13927 affects all GitLab versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2.
Can unprivileged users exploit CVE-2025-13927?
Yes, CVE-2025-13927 can be exploited by unauthenticated users to create denial of service conditions.
Is there a patch available for CVE-2025-13927?
Yes, patches for CVE-2025-13927 are included in the GitLab updates 18.6.4, 18.7.2, and 18.8.2.