CVE-2026-82837

score

0.2

cvss

5.3

epss

0.2%

published

2026-09-15

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 10.1.0 and < 19.1.8, 19.2 < 19.2.6, and 19.3 < 19.3.2 contain an information disclosure caused by improper authorization checks on internal data emission endpoints, letting authenticated users access sensitive credentials and tokens without proxy transit.