CVE-2026-13210

score

0.3

cvss

7.7

epss

0.2%

published

2026-09-15

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 15.7 and < 19.1.8, 19.2 and < 19.2.6, 19.3 and < 19.3.2 contain an information disclosure caused by improper input validation in the environment scope pattern matcher, letting authenticated users access CI/CD variables outside their intended environment scope, exploit requires user authentication.