HIGH 7.7 NVD

CVE-2026-13210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain con

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input validation in the environment scope pattern matcher.

References

https://gitlab.com/gitlab-org/gitlab/-/work_items/603978
https://hackerone.com/reports/3655211

Published: 2026-09-15 · Source: NVD · Feed updated: 2026-09-15

This high severity vulnerability with a CVSS score of 7.7 was published on 2026-09-15 via NVD.

vulnfeed aggregates 14340 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.