CVE-2026-81839: Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's privileges due to improper cleanup of scheduled pipeline execution policy records.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GitLab EEto a version that resolves this vulnerability.Fixed in 19.2.8 - Upgrade
Upgrade
GitLab EEto a version that resolves this vulnerability.Fixed in 19.3.5 - Upgrade
Upgrade
GitLab EEto a version that resolves this vulnerability.Fixed in 19.4.2
Event History
Frequently Asked Questions
Which GitLab EE versions need remediation?
Affected versions are 18.1 through versions before 19.2.8, 19.3 through versions before 19.3.5, and 19.4 through versions before 19.4.2. Upgrade to 19.2.8, 19.3.5, 19.4.2, or a later release in the applicable release line.
What conditions are required for exploitation?
An attacker must be an authenticated user and requires conditions involving a transferred project and scheduled pipeline execution policy records that were not properly cleaned up. Successful exploitation also requires user interaction, according to the provided vector.
What is the potential impact?
An authenticated attacker could execute arbitrary CI/CD pipelines in a transferred project using the new group's privileges. This can result in high confidentiality and integrity impact, including exposure or modification of resources accessible through those privileges.