CVE-2026-104661 | GitLab up to 19.2.7/19.3.4/19.4.1 Compliance Pipeline permission

October 13, 2026 Yanac

A vulnerability, which was classified as problematic, was found in GitLab up to 19.2.7/19.3.4/19.4.1. Affected by this issue is some unknown functionality of the component Compliance Pipeline. Such manipulation leads to permission issues.

This vulnerability is referenced as CVE-2026-104661. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More