CVE-2026-4879 | GitLab up to 19.0.5/19.1.3/19.2.1 Merge Request API Endpoint improper authorization

A vulnerability, which was classified as problematic, was found in GitLab up to 19.0.5/19.1.3/19.2.1. Impacted is an unknown function of the component Merge Request API Endpoint. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-4879. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More