GCVE-110-NCSC-2026-447

Advisory PublishedCVSS 4.3/10

Vulnetix · Advisory published October 22, 2026

GitLab versions prior to 19.3.6, 19.4.3, and 19.5.1 contained a vulnerability allowing authenticated users with read_api-scoped tokens to bypass token restrictions and access project incoming email addresses via a GraphQL field with insufficient scope enforcement.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-863Incorrect AuthorizationCWE-639Authorization Bypass Through User-Controlled KeyCWE-706Use of Incorrectly-Resolved Name or ReferenceCWE-90Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')CWE-524Use of Cache Containing Sensitive InformationCWE-201Insertion of Sensitive Information Into Sent DataCWE-190Integer Overflow or WraparoundCWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-460Improper Cleanup on Thrown ExceptionCWE-348Use of Less Trusted Source

Risk Scores

CVSS 3.1

4.3/10

Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
GitLab	vers:unknown/*	—	—

Aliases

CVE-2026-103515 CVE-2026-105711 CVE-2026-105777 CVE-2026-110264 CVE-2026-112212 CVE-2026-112326 CVE-2026-112378 CVE-2026-12664 CVE-2026-13319 CVE-2026-14288 CVE-2026-15723 CVE-2026-16255

References

advisory

Browse GCVE Records

930 records in the GCVE database · Updated November 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON