CVE-2026-105711

low

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge re…

Vendor / product: Gitlab — gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.

CVSS

3.5

3.5 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Severity source: NVD CVSS v3.1 (cve@gitlab.com)

Timeline (UTC)

Published: 2026-10-22 01:16

Modified: 2026-10-27 14:05

NVD status: Analyzed

Last synced 17 hours ago

Verified against the source API 2026-10-28 11:30 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

gitlab / gitlab ≥15.0.0 <19.3.6, ≥19.4.0 <19.4.3, 19.5.0

Weakness classification (CWE)

CWE-524

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/

References

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ cve@gitlab.com
https://gitlab.com/gitlab-org/gitlab/-/work_items/632207 cve@gitlab.com
https://hackerone.com/reports/3963293 cve@gitlab.com

Data sources

NVD CVE API 2.0 — fetched 2026-10-28 11:30 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-105711

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs