CVE-2026-87720 | Gerrit up to 3.12.9/3.13.8/3.14.2 Project Name Normalization/ProjectCache Eviction ProjectUtil.stripGitSuffix/ProjectCacheImpl authorization

September 24, 2026 Yanac

A vulnerability classified as critical was found in Gerrit up to 3.12.9/3.13.8/3.14.2. This vulnerability affects the function ProjectUtil.stripGitSuffix/ProjectCacheImpl of the component Project Name Normalization/ProjectCache Eviction. Such manipulation leads to incorrect authorization.

This vulnerability is listed as CVE-2026-87720. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More