Medium severity6.5NVD Advisory· Published Jan 8, 2025· Updated Jun 17, 2026
CVE-2025-0194
CVE-2025-0194
Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15- osv-coords11 versionspkg:apk/chainguard/gitlab-runner-fips-17.7pkg:apk/chainguard/gitlab-runner-helper-fips-17.7pkg:bitnami/gitlabpkg:apk/chainguard/gitlab-elasticsearch-indexer-fips-17.6pkg:apk/chainguard/gitlab-shell-fips-17.6pkg:apk/chainguard/gitlab-toolbox-fips-17.6pkg:apk/chainguard/gitlab-container-registry-fips-17.6pkg:apk/chainguard/gitlab-base-fips-17.6pkg:apk/chainguard/gitlab-logger-fips-17.6pkg:apk/chainguard/gitlab-cng-fips-17.6pkg:apk/chainguard/gitlab-docker-machine-fips-17.7
< 17.7.1-r1+ 10 more
- (no CPE)range: < 17.7.1-r1
- (no CPE)range: < 17.7.1-r1
- (no CPE)range: >= 17.4.0, < 17.5.5
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.6.5-r0
- (no CPE)range: < 17.7.1-r1
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=17.4.0,<17.5.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=17.4.0,<17.5.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 17.4
- Range: starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/gitlab/-/issues/489459nvdExploitIssue TrackingVendor Advisory
- about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/nvdRelease Notes
News mentions
1- GitLab Patch Release: 17.7.1, 17.6.3, 17.5.5GitLab Security Releases · Jan 8, 2025