CVE-2026-18244

score

0.1

cvss

4.3

epss

0.3%

published

2026-08-12

kev added

—

first seen

2026-10-21

GitLab EE >= 17.7, < 19.0.6, 19.1 < 19.1.4, and 19.2 < 19.2.2 contains an information disclosure caused by improper authorization checks on a group settings page, letting authenticated users view restricted configuration settings, exploit requires user authentication.