CVE-2026-12664 | GitLab up to 19.3.5/19.4.2/19.5.0 GraphQL Field privileges management

October 22, 2026 Yanac

A vulnerability, which was classified as critical, has been found in GitLab up to 19.3.5/19.4.2/19.5.0. This issue affects some unknown processing of the component GraphQL Field. Performing a manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-12664. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More