AI description
CVE-2026-19650 is a vulnerability identified in GitLab Community Edition (CE) and Enterprise Edition (EE) that stems from improper request validation within the GraphQL multiplex query handling mechanism. This flaw allows an unauthenticated user to execute mutations through standard GET requests. The technical root cause lies in the GraphQL server's processing of multiplexed queries, where the validation logic failed to adequately distinguish between data retrieval operations (queries) and state-modifying operations (mutations) when submitted via GET methods. This vulnerability is also characterized as a Cross-Site Request Forgery (CSRF) issue in the GraphQL API. It affects GitLab CE/EE versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4.
- Description
- GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling.
- Source
- cve@gitlab.com
- NVD status
- Analyzed
- Products
- gitlab
CVSS 3.1
- Type
- Secondary
- Base score
- 7.1
- Impact score
- 4.2
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
- Severity
- HIGH
- cve@gitlab.com
- CWE-352
- Hype score
- Not currently trending
Opening public the lab + safe PoC for GitLab CVE-2026-19478 / CVE-2026-19650 (GraphQL @gl_introduced ) , since it's already around. This is a 'safe env setup' https://t.co/0R0HbzTTdQ
@Dinosn
23 Aug 2026
5536 Impressions
13 Retweets
61 Likes
32 Bookmarks
1 Reply
0 Quotes
🚨 One GraphQL Directive. Two GitLab CVEs. CVE-2026-19478 (9.4): unauthenticated users can modify/delete public projects + user data CVE-2026-19650 (7.1): CSRF can execute mutations using a logged-in user’s session FULL REPORT: https://t.co/x7O2xXHq0l -- #CyberSecurity #C
@OX__Security
18 Aug 2026
340 Impressions
2 Retweets
8 Likes
0 Bookmarks
0 Replies
0 Quotes
GitLab patches two vulnerabilities in CE and EE. CVE-2026-19478 (CVSS 9.4) permits unauthenticated code injection via GraphQL directives to alter or delete public projects. CVE-2026-19650 (CVSS 7.1) enables CSRF through insufficient GraphQL multiplex query validation. Upgrade
@WorldCyberNewsX
18 Aug 2026
31 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
GitLabに重大(Critical)な脆弱性。CVE-2026-19478はCVSSスコア9.4で、GraphQL経由で無認証で公開リポジトリを削除可能なもの。具体的に脆弱なディレクティブは非開示。GraphQLにおけるSSRFのCVE-2026-19650と併せ修正。 https://t
@__kokumoto
17 Aug 2026
703 Impressions
0 Retweets
2 Likes
2 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "D528B105-3DE1-471D-9623-F491A9F0D8C8",
"versionEndExcluding": "18.11.11",
"versionStartIncluding": "18.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "6CD95576-AC3B-4921-A002-72BD47579B77",
"versionEndExcluding": "18.11.11",
"versionStartIncluding": "18.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "C5EDDC0D-4D7B-4B69-A6F4-DA5A3A3C4638",
"versionEndExcluding": "19.0.8",
"versionStartIncluding": "19.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "A6B9C822-A303-486D-8787-73BA8A82C58B",
"versionEndExcluding": "19.0.8",
"versionStartIncluding": "19.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "7BB02223-1F27-4183-840A-0AAC4F6F2A5C",
"versionEndExcluding": "19.1.6",
"versionStartIncluding": "19.1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "99D8510B-7BB5-4405-A3E6-D030BD420349",
"versionEndExcluding": "19.1.6",
"versionStartIncluding": "19.1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "4D5485F8-E798-4A6B-B1C4-873D0DD58D8C",
"versionEndExcluding": "19.2.4",
"versionStartIncluding": "19.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "F92746EA-6152-4A7C-8509-4A94DF041B94",
"versionEndExcluding": "19.2.4",
"versionStartIncluding": "19.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]