Vulnetix
Try Vulnetix Request Demo
CVE-2025-10871 PUBLISHED

An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Project Maintainers can exploit a vulnerability where they can assign custom roles to users with permissions exceeding their own, effectively granting themselves elevated privileges.

EPSS 0.02% · 4.0th percentile

Risk Scores

EPSS Score
0.02%
4.0th percentile

Affected Products

VendorProductVersions
Bitnamigitlab16.6.0, 18.3.0, 18.4.0
Bitnamigitlab16.6.0, 18.3.0, 18.4.0

Timeline

References

Open in Interactive Console →