CVE-2026-1606 | GitLab Community Edition/Enterprise Edition up to 18.11.5/19.0.2/19.1.0 code injection

June 25, 2026 Yanac

A vulnerability labeled as critical has been found in GitLab Community Edition and Enterprise Edition up to 18.11.5/19.0.2/19.1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to code injection.

This vulnerability is referenced as CVE-2026-1606. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More