{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1752", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "state": "PUBLISHED", "assignerShortName": "GitLab", "dateReserved": "2026-02-02T09:33:10.110Z", "datePublished": "2026-04-08T22:25:52.858Z", "dateUpdated": "2026-04-08T22:25:52.858Z"}, "containers": {"cna": {"title": "Incorrect Authorization in GitLab", "descriptions": [{"lang": "en", "value": "GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API."}], "affected": [{"vendor": "GitLab", "product": "GitLab", "repo": "git://git@gitlab.com:gitlab-org/gitlab.git", "cpes": ["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"], "versions": [{"version": "11.3", "status": "affected", "lessThan": "18.8.9", "versionType": "semver"}, {"version": "18.9", "status": "affected", "lessThan": "18.9.5", "versionType": "semver"}, {"version": "18.10", "status": "affected", "lessThan": "18.10.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-863: Incorrect Authorization", "cweId": "CWE-863", "type": "CWE"}]}], "references": [{"url": "https://hackerone.com/reports/3533545", "name": "HackerOne Bug Bounty Report #3533545", "tags": ["technical-description", "exploit", "permissions-required"]}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/588413"}, {"url": "https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "solutions": [{"lang": "en", "value": "Upgrade to versions 18.8.9, 18.9.5, 18.10.3 or above."}], "credits": [{"lang": "en", "value": "Thanks [modhanami](https://hackerone.com/modhanami) for reporting this vulnerability through our HackerOne bug bounty program", "type": "finder"}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-04-08T22:25:52.858Z"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API."}], "id": "CVE-2026-1752", "lastModified": "2026-04-08T23:16:58.077", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cve@gitlab.com", "type": "Secondary"}]}, "published": "2026-04-08T23:16:58.077", "references": [{"source": "cve@gitlab.com", "url": "https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/"}, {"source": "cve@gitlab.com", "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/588413"}, {"source": "cve@gitlab.com", "url": "https://hackerone.com/reports/3533545"}], "sourceIdentifier": "cve@gitlab.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "cve@gitlab.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[11.3,18.8.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[18.9,18.9.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[18.10,18.10.3)"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "GitLab", "source": "cna", "vendor": "GitLab"}, "product": "gitlab", "vendor": "gitlab"}], "analysis": {"en": {"generated_at": "2026-04-08T23:22:42.566795+00:00", "value": {"mitigation_remediation": ["Upgrade GitLab Enterprise Edition to version 18.8.9, 18.9.5, 18.10.3, or newer to apply the vendor patch."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized Modification of Protected Environment Settings"}, "threat_synthesis": {"affected_systems": "All GitLab Enterprise Edition installations from version 11.3 up through 18.8.8, 18.9.4, and 18.10.2 are impacted. The issue has been fixed starting with GitLab 18.8.9, 18.9.5, and 18.10.3 and newer releases. Any instance running an affected version should be upgraded to a patched release to eliminate the vulnerability.", "description_and_impact": "GitLab Enterprise Edition contains a flaw that allows an authenticated user with developer\u2011level permissions to change the settings of a protected deployment environment via the API. The improper authorization check permits the user to bypass the intended restriction, potentially enabling the deployment of code to environments that should only be accessed by higher\u2011privileged roles. The weakness is a classic checks\u2011before\u2011use error (CWE\u2011863). While it does not directly execute arbitrary code, the ability to reconfigure protect\u2011ed pipelines can lead to privilege escalation and unauthorized application deployments, harming confidentiality, integrity, and availability of the affected services.", "risk_and_exploitability": "The CVSS base score of 4.3 indicates a moderate risk, and the vulnerability is not listed in the CISA KEV catalog. EPSS data is unavailable, but the attack requires an authenticated session with a developer role and access to the project\u2019s API. Accordingly, the exploit is likely to be limited to users who already have legitimate access, but a malicious developer can misconfigure a protected environment, causing unintended deployments or environment mutilation. The vulnerability is therefore a medium\u2011risk concern that should be addressed promptly."}}}}, "created": "2026-04-09T08:16:11.568699+00:00", "updated": "2026-04-09T08:25:37.513913+00:00", "vendors": ["gitlab", "gitlab$PRODUCT$gitlab"]}