CVE-2026-100104 | GitLab up to 19.2.7/19.3.4/19.4.1 URL Validation race condition

October 13, 2026 Yanac

A vulnerability has been found in GitLab up to 19.2.7/19.3.4/19.4.1 and classified as critical. This affects an unknown part of the component URL Validation. Performing a manipulation results in race condition.

This vulnerability is identified as CVE-2026-100104. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More