VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 25, 2026· Updated Mar 25, 2026

Incorrect Authorization in GitLab

CVE-2026-4363

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have allowed an authenticated user to gain unauthorized access to resources due to improper caching of authorization decisions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 18.1
    • (no CPE)range: >=18.1 <18.8.7, >=18.9 <18.9.3, >=18.10 <18.10.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 18.1.0, < 18.8.7

Patches

Vulnerability mechanics

References

1

News mentions

1