MEDIUM

CVE-2026-3035

Gitlab GitLab 2026-08-26 CVSS v3.1

CVSS

5.5

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were not authorized to use due to improper authorization checks.

Weakness (CWE)

CWE-288

EPSS Score

0.23%

Probability of exploitation in next 30 days

14th percentile

References

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/ Release Notes, Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/work_items/591189 Issue Tracking, Vendor Advisory https://hackerone.com/reports/3529751 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE