VYPR
← All advisories
High severity7.7NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026

CVE-2026-13210

CVE-2026-13210

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input validation in the environment scope pattern matcher.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GitLab Inc./GitLabreferences4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=15.7.0,<19.1.8
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.7.0,<19.1.8
    • (no CPE)range: from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.7.0, < 19.1.8

Patches

Vulnerability mechanics

References

1

News mentions

2