Open redirect in GitLab Enterprise Edition and Gitlab Community Edition - CVE-2026-7767
Published: October 13, 2026
Vulnerability identifier: #VU154156
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-7767
CWE-ID: CWE-601
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive authentication tokens to an unintended server.
The vulnerability exists due to improper redirect validation in the Kubernetes proxy when handling redirects. A remote user can use a controlled Kubernetes agent to cause tokens to be sent to an unintended server to disclose sensitive authentication tokens.
User interaction is required.
Affected software
GitLab Enterprise Edition
Gitlab Community Edition
Gitlab Community Edition
How to mitigate CVE-2026-7767
Install security update from vendor's website.
GitLab Enterprise Edition - addressed in versions 19.2.8, 19.3.4, 19.4.2
Gitlab Community Edition - addressed in versions 19.2.8, 19.3.4, 19.4.2
Gitlab Community Edition - addressed in versions 19.2.8, 19.3.4, 19.4.2