CVE-2026-7250
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request parsing middleware.
Summary dbcve.org
An improper input validation vulnerability in GitLab's API request parsing middleware allows unauthenticated attackers to trigger denial of service by sending specially crafted API requests. The vulnerability affects multiple GitLab versions from 12.10 through 19.0 and is exploitable without any authentication.
Mitigation
Upgrade GitLab to version 18.10.8, 18.11.5, or 19.0.2 or later. For production deployments, schedule maintenance window and ensure backups exist before performing the upgrade.