CVE-2026-12910

score

0.3

cvss

5.4

epss

0.2%

published

2026-09-15

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 18.6, < 19.1.8, 19.2 < 19.2.6, and 19.3 < 19.3.2 contain an authentication bypass caused by missing enforcement checks in SAML SSO sign-in, letting authenticated users bypass SSO restrictions, exploit requires user authentication.