CVE-2026-10712 | GitLab Community Edition/Enterprise Edition up to 18.11.5/19.0.2/19.1.0 Path Validation cross site scripting

June 25, 2026 Yanac

A vulnerability categorized as problematic has been discovered in GitLab Community Edition and Enterprise Edition up to 18.11.5/19.0.2/19.1.0. This impacts an unknown function of the component Path Validation Handler. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-10712. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More