VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2023-6955

CVE-2023-6955

Description

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • GitLab Inc./GitLabv58 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 0
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <16.5.6
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <16.5.6
    • cpe:2.3:a:gitlab:gitlab:16.7.0:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:16.7.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:gitlab:gitlab:16.7.1:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:16.7.1:*:*:*:enterprise:*:*:*
    • (no CPE)range: <16.5.6, <16.6.4, <16.7.2
  • GitLab Inc./GitLab Remote Developmentllm-create
    Range: <16.5.6, <16.6.4, <16.7.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: < 16.5.6

Patches

Vulnerability mechanics

References

1

News mentions

1