CVE-2026-85529 | GitLab up to 19.2.7/19.3.4/19.4.1 GraphQL API improper authorization

October 13, 2026 Yanac

A vulnerability was found in GitLab up to 19.2.7/19.3.4/19.4.1 and classified as problematic. The affected element is an unknown function of the component GraphQL API. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-85529. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More