CVE-2026-1662: Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.
Other sources
GitLab has remediated an issue that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-1662?
CVE-2026-1662 has been classified as a Denial of Service vulnerability.
How do I fix CVE-2026-1662?
To remediate CVE-2026-1662, upgrade your GitLab installation to versions 18.7.5, 18.8.5, or 18.9.1.
Which versions are affected by CVE-2026-1662?
CVE-2026-1662 affects GitLab CE/EE versions from 14.4 up to, but not including, 18.7.5, 18.8.5, and 18.9.1.
Who is affected by CVE-2026-1662?
All users of GitLab CE/EE versions from 14.4 up to 18.7.4, 18.8.4, and 18.9.0 are affected by CVE-2026-1662.
What type of issue is CVE-2026-1662?
CVE-2026-1662 is a Denial of Service issue that allows an unauthenticated user to disrupt service.