CVE-2026-4523

Published 29 September 2026 · tracked since 29 September 2026

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper au

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-85520
• CVE-2026-95520 HIGH 7.1
• CVE-2026-66083
• CVE-2026-102495
• CVE-2026-102496
• CVE-2026-102497
• CVE-2026-8937 MEDIUM 4.3
• CVE-2026-81862
• CVE-2026-81914
• CVE-2026-81930 MEDIUM 6.3

→ Open the live CVE board · all tools