CVE-2025-11340 | GitLab Enterprise Edition up to 18.3.3/18.4.1 GraphQL Mutation authorization (Patch 567847 / EUVD-2025-33333)

October 9, 2025 Yanac

A vulnerability labeled as problematic has been found in GitLab Enterprise Edition up to 18.3.3/18.4.1. Affected is an unknown function of the component GraphQL Mutation Handler. Such manipulation leads to incorrect authorization.

This vulnerability is uniquely identified as CVE-2025-11340. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More