CVE-2025-10903

score

0.2

cvss

6.5

epss

0.4%

published

2026-08-26

kev added

—

first seen

2026-10-21

GitLab EE >= 11.10, < 19.1.7, 19.2 < 19.2.5, and 19.3 < 19.3.1 contains a denial of service caused by an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature, letting authenticated users cause service disruption, exploit requires authentication.