CVE-2026-16301 | GitLab up to 19.2.7/19.3.4/19.4.1 Downstream Pipeline Creation Service improper authorization

October 13, 2026 Yanac

A vulnerability labeled as critical has been found in GitLab up to 19.2.7/19.3.4/19.4.1. This impacts an unknown function of the component Downstream Pipeline Creation Service. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-16301. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More