CVE-2026-4672

score

0.1

cvss

4.3

epss

0.4%

published

2026-07-29

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 18.4 and < 19.0.5, >= 19.1 and < 19.1.3, >= 19.2 and < 19.2.1 contains an access control vulnerability caused by improper enforcement in test report access, letting authenticated guest users view unauthorized test report contents, exploit requires guest role authentication.