CVE-2026-77801

score

0.2

cvss

6.5

epss

0.4%

published

2026-08-26

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 12.8 and < 19.1.7, 19.2 and < 19.2.5, 19.3 and < 19.3.1 contain a denial of service caused by missing object count limits in background job processing, letting authenticated users cause service disruption, exploit requires user authentication.