CVE-2025-8279: Missing Authentication for Critical Function in GitLab Language Server
Published Jul 28, 2025
·Updated
Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution
Affected Software
2 affected components
GitLab Language Server>=7.6.0<7.30.0
GitLab Language Server>=7.6.0<7.30.0
Event History
Jul 28, 2025
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 5, 57630
Event
via FIRST·09:27 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-8279?
The severity of CVE-2025-8279 is considered high due to the potential for arbitrary GraphQL query execution.
2
How do I fix CVE-2025-8279?
To fix CVE-2025-8279, upgrade GitLab Language Server to version 7.30.0 or later.
3
What versions of GitLab Language Server are affected by CVE-2025-8279?
GitLab Language Server versions from 7.6.0 to 7.29.9 are affected by CVE-2025-8279.
4
Can CVE-2025-8279 lead to a data breach?
Yes, CVE-2025-8279 may allow unauthorized access to execute arbitrary queries, potentially leading to a data breach.
5
Is input validation the only issue with CVE-2025-8279?
Yes, CVE-2025-8279 primarily revolves around insufficient input validation that allows for arbitrary GraphQL queries.