CVE-2026-11827

score

0.1

cvss

4.9

epss

0.4%

published

2026-07-08

kev added

—

first seen

2026-10-21

GitLab EE 9.5 < 18.11.7, 19.0 < 19.0.4, and 19.1 < 19.1.2 contain an information disclosure vulnerability caused by improper authorization controls, letting authenticated maintainers obtain other users' stored credentials, exploit requires maintainer role.