CVE-2025-14562Low· 3.1▾ SunlitGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 17.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a member, due to improper authorization checks on merge request collaboration settings.
gitlab >= 10.6.0, < 19.0.5gitlab >= 19.1.0, < 19.1.3gitlab = 19.2.0Upgrade past the affected range:
gitlab 19.1.3Connected by shared product, vendor, weakness, or advisory.
CVE-2023-5009High· 8.2Incorrect Authorization in GitLab
CVE-2026-103515Low· 2.7Incorrect Authorization in GitLab
CVE-2026-16255Medium· 5.9Incorrect Authorization in GitLab
CVE-2026-12664Medium· 6.8Incorrect Authorization in GitLab
CVE-2023-4379High· 8.1Incorrect Authorization in GitLab
CVE-2026-9807Medium· 4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed a blocked Project Access Token to continue acce…