CVE-2025-9825 | GitLab Community Edition/Enterprise Edition up to 18.2.7/18.3.3/18.4.1 GraphQL API authorization (Patch 567301)

November 21, 2025 Yanac

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 18.2.7/18.3.3/18.4.1. It has been declared as problematic. This affects an unknown part of the component GraphQL API. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2025-9825. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More