CVE-2026-15387

score

0.1

cvss

4.3

epss

0.2%

published

2026-08-26

kev added

—

first seen

2026-10-21

GitLab EE >= 19.1, < 19.1.7, >= 19.2, < 19.2.5, and >= 19.3, < 19.3.1 contains a broken access control vulnerability caused by improper handling of job dependencies in Pipeline Execution Policy enforcement jobs, letting authenticated users with developer-role permissions influence the execution environment.