CVE-2026-1752
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
GitLab EE from versions 11.3 to 18.8.9, 18.9 to 18.9.5, and 18.10 to 18.10.3 contains a vulnerability that allows an authenticated user with developer role to modify protected environment settings due to improper authorization checks in the API.
Risk Assessment
The risk involves unauthorized modification of production environment configurations, potentially leading to disruptions or privilege escalation.
Recommendation
Update GitLab EE to versions 18.8.9, 18.9.5, or 18.10.3 which contain the fix.
Original NVD description (English source)
GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.