GitLab CE/EE fixes 6 vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] GitLab CE/EE fixes 6 vulnerabilities

With versions 18.6.1, 18.5.3 and 18.4.5, GitLab fixes 6 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) [1]. The most serious of them are listed below.

GitLab CE/EE - privilege escalation (CVE-2024-9183)

CVSS 7.7 (High)

An authenticated remote attacker can exploit improper synchronization in the CI/CD cache, which may lead to privilege escalation [1].

The vulnerability is present in products:

GitLab Community Edition; >=18.4, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1
GitLab Enterprise Edition; >=18.4, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

More information:

CVE-2024-9183 at cve.org, NVD
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') at cwe.mitre.org

The vulnerability was publicly disclosed 26. 11. 2025.

GitLab CE/EE - DoS (CVE-2025-12571)

CVSS 7.5 (High)

An unauthenticated remote attacker can exploit a flaw in JSON input validation and cause a DoS by sending specially crafted requests [1].

The vulnerability is present in products:

GitLab Community Edition; >=17.10, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1
GitLab Enterprise Edition; >=17.10, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2025-12571 at cve.org, NVD
CWE-770: Allocation of Resources Without Limits or Throttling at cwe.mitre.org

The vulnerability was publicly disclosed 26. 11. 2025.

GitLab CE/EE - Authentication bypass (CVE-2025-12653)

CVSS 6.5 (Medium)

An unauthenticated remote attacker can bypass verification by modifying headers during account registration and improperly add themselves to any organization [1].

The vulnerability is present in products:

GitLab Community Edition; >=18.3, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1
GitLab Enterprise Edition; >=18.3, <18.4.5; >=18.5, <18.5.3; >=18.6, <18.6.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

More information:

CVE-2025-12653 at cve.org, NVD
CWE-290: Authentication Bypass by Spoofing at cwe.mitre.org

The vulnerability was publicly disclosed 26. 11. 2025.

Report feedback

[TLP:CLEAR] GitLab CE/EE fixes 6 vulnerabilities

GitLab CE/EE - privilege escalation (CVE-2024-9183)

CVSS 7.7 (High)

GitLab CE/EE - DoS (CVE-2025-12571)

CVSS 7.5 (High)

GitLab CE/EE - Authentication bypass (CVE-2025-12653)

CVSS 6.5 (Medium)

Links