CVE-2026-86341

score

0.2

cvss

4.4

epss

0.4%

published

2026-09-16

kev added

—

first seen

2026-10-21

GitLab EE >= 17.1 and < 19.1.8, >= 19.2 and < 19.2.6, >= 19.3 and < 19.3.2 contains a broken access control vulnerability caused by improper access control checks after protected resource modification, letting authenticated users with Owner or Maintainer permissions silently disable protected environment deployment approval requirements, exploit requires authenticated user with elevated permissions.