CVE-2026-19478

LLM-synthesized narrative grounded in this CVE's description and references.

• GitLab Inc./GitLab EE and CEllm-fuzzy

  Range: from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4
• GitLab Inc./GitLabllm-fuzzy

  Range: from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4
• osv-coords

  pkg:bitnami/gitlab

  Range: >= 18.2.0, < 18.11.11

• docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/nvdVendor Advisory
• hackerone.com/reports/3926431nvdPermissions Required

• Maximum Severity GitLab Flaw Puts Supply Chains at Risk
  Dark Reading · Sep 14, 2026
• GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
  The Hacker News · Sep 11, 2026
• ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
  The Hacker News · Aug 24, 2026
• 24th August – Threat Intelligence Report
  Check Point Research · Aug 24, 2026
• Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
  Help Net Security · Aug 23, 2026
• Critical GitLab Code Injection Vulnerability Actively Exploited in Attacks
  Cyber Security News · Aug 21, 2026
• GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
  The Hacker News · Aug 21, 2026
• Critical GitLab Flaw Exploited Shortly After Disclosure
  SecurityWeek · Aug 20, 2026
• GitLab Code Injection Flaw Exploited in the Wild
  GovInfoSecurity · Aug 19, 2026
• Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
  Dark Reading · Aug 18, 2026
• Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)
  Help Net Security · Aug 18, 2026
• GitLab Patches Critical Code Injection Vulnerability
  SecurityWeek · Aug 18, 2026
• Critical GitLab GraphQL Vulnerability Allow Attackers to Delete Public Projects
  Cyber Security News · Aug 18, 2026
• Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
  The Hacker News · Aug 17, 2026
• GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11
  GitLab Security Releases · Aug 17, 2026