CVE-2026-8030

score

0.3

cvss

4.3

epss

0.5% ▲0.1

published

2026-09-16

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 13.0 < 19.1.8, 19.2 < 19.2.6, and 19.3 < 19.3.2 contain a broken access control caused by improper validation of group URL slugs during namespace transfers, letting authenticated users prevent others from modifying group settings, exploit requires authentication.