Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit these vulnerabilities to trigger denial of service condition, remote code execution, cross-site scripting, sensitive information disclosure and security restriction bypass on the targeted system. GitLab has released versions 19.3.2, 19.2.6, 19.1.8 for GitLab Community Edition (CE) and Enterprise Edition (EE).

Gitlab reports that security vulnerability (CVE-2026-85706) is likely to be exploited in the wild.

More information on vulnerabilities and updates is available in GitLab security advisory – gitlab.com.