CVE Catalog
CVE-2026-1516
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk0.43%
35th percentile - higher than 35% of all known CVEs
Summary
In GitLab EE (versions 18.0.0-18.8.9, 18.9-18.9.5, 18.10-18.10.3), an authenticated user can leak IP addresses of users viewing Code Quality reports via specially crafted content.
Risk Assessment
Risk of exposing user IP addresses, potentially compromising privacy and enabling further attacks.
Recommendation
Upgrade GitLab EE to version 18.8.9, 18.9.5, or 18.10.3, which contain the fix.
Original NVD description (English source)
GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content.