CVSS 9.0 (critical) ยท published 2026-08-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper sanitization of HTML content rendered in a CI job modal.
Affected products (NVD): gitlab gitlab
Fixed in (NVD): 19.2.2
Weakness: CWE-79
Source: NVD CVE-2026-16627
Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.