VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026

CVE-2026-12910

CVE-2026-12910

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass SAML SSO sign-in restrictions and authenticate without SSO due to missing authentication enforcement checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GitLab Inc./GitLabreferences4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=18.6.0,<19.1.8
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=18.6.0,<19.1.8
    • (no CPE)range: 18.6 <= version < 19.1.8, 19.2 < version < 19.2.6, 19.3 < version < 19.3.2
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: 18.6 <= version < 19.1.8, 19.2 < version < 19.2.6, 19.3 < version < 19.3.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 18.6.0, < 19.1.8

Patches

Vulnerability mechanics

References

1

News mentions

2