CVE-2026-18433

score

0.1

cvss

4.3

epss

0.4%

published

2026-08-12

kev added

—

first seen

2026-10-21

GitLab EE >= 19.1 < 19.1.4 and >= 19.2 < 19.2.2 contains an information disclosure caused by incorrect authorization checks in a GraphQL query, letting authenticated users read unauthorized namespace policy configurations, exploit requires authentication.