CVE-2025-11989 | GitLab Enterprise Edition up to 18.3.4/18.4.2/18.5.0 Description authorization (Patch 1426)

October 27, 2025 Yanac

A vulnerability classified as problematic has been found in GitLab Enterprise Edition up to 18.3.4/18.4.2/18.5.0. This issue affects some unknown processing of the component Description Handler. The manipulation leads to missing authorization.

This vulnerability is listed as CVE-2025-11989. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More