GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8

On October 12, 2026, we released versions 19.4.2, 19.3.4, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE).

Known issue: 19.3.4 has a bug that affects merge request pages when the Ona integration is enabled. A fix will follow in 19.3.5.

These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action.

GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases and ad-hoc critical patches for high-severity vulnerabilities. Scheduled releases are released twice a month on the second and fourth Wednesdays. For more information, please visit our releases handbook and security FAQ. You can see all of GitLab release blog posts here.

For security fixes, the issues detailing each vulnerability are made public on our issue tracker 90 days after the release in which they were patched.

We are committed to ensuring that all aspects of GitLab that are exposed to customers or that host customer data are held to the highest security standards. To maintain good security hygiene, it is highly recommended that all customers upgrade to the latest patch release for their supported version. You can read more best practices in securing your GitLab instance in our blog post.

Recommended Action

We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible.

When no specific deployment type (omnibus, source code, helm chart, etc.) of a product is mentioned, it means all types are affected.

Security fixes

Table of security fixes

CVE-2026-97229 - Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Impacted Versions: GitLab CE/EE: all versions from 19.2 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Thanks joaxcar for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-92883 - Cross-site Scripting issue in syntax highlighting impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users’ browser sessions via a specially crafted repository, due to improper sanitization of HTML attributes in syntax-highlighted output.

Impacted Versions: GitLab CE/EE: all versions from 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 8.7 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)

Thanks a0xnirudh for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-16301 - Improper Authorization issue in downstream pipeline creation service impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.

Impacted Versions: GitLab CE/EE: all versions from 18.7 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N)

Thanks sim4n6 for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-14814 - Permissive Regular Expression issue in repository file access impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users’ CI/CD pipelines to execute specially crafted content and potentially exposing protected environment variables, due to improper validation of repository references.

Impacted Versions: GitLab CE/EE: all versions before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 8.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)

Thanks ahacker1 for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-81839 - Incorrect Authorization issue in scheduled pipeline execution policy impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group’s privileges due to improper cleanup of scheduled pipeline execution policy records.

Impacted Versions: GitLab EE: all versions from 18.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 7.7 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N)

Thanks no_01 for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-96893 - Improper Neutralization of Input Used for LLM Prompting issue in GitLab Duo Agent Platform impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.

Impacted Versions: GitLab EE: all versions from 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 7.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)

This vulnerability has been discovered internally by GitLab team member Mert Coskuner.

CVE-2026-101168 - Sensitive Information Exposure issue in GitLab Pages impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to insertion of sensitive request data into log files and error tracking events.

Impacted Versions: GitLab CE/EE: all versions from 12.0 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 6.2 (CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)

This vulnerability has been discovered internally by GitLab team member RJ Coleman.

CVE-2026-7767 - Open Redirect issue in Kubernetes proxy impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.

Impacted Versions: GitLab CE/EE: all versions from 13.11 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 5.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N)

Thanks joaxcar for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-16275 - Incorrect Authorization issue in GraphQL notes widget impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 17.4 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Thanks jaykp for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-84284 - Incorrect Authorization issue in GraphQL work item hierarchy impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2
CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Thanks modhanami for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-85529 - Incorrect Authorization issue in GraphQL scope impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.

Impacted Versions: GitLab CE/EE: all versions from 19.2 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Thanks silaen_space for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-100755 - Page cache poisoning via improper cache key construction in merge requests impacts GitLab CE/EE

GitLab has remediated an issue that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cache key construction.

Impacted Versions: GitLab CE/EE: all versions from 16.2 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.6 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)

This vulnerability has been discovered internally by GitLab team member Peter Arts.

CVE-2026-14552 - Incorrect Authorization issue in work items GraphQL API impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external authorization, due to incorrect authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 17.0 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Thanks 3nvz for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-6567 - Missing Authorization issue in merge request accessibility report comparison endpoint impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with reporter role to access restricted CI artifact report content they were not authorized to, due to missing authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 13.8 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Thanks se1en for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-104661 - Incorrect Privilege Assignment issue in custom roles impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.

Impacted Versions: GitLab EE: all versions from 17.0 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

This vulnerability has been discovered internally by a GitLab team member.

CVE-2026-14210 - Insufficient Granularity of Access Control issue in project label management impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.

Impacted Versions: GitLab CE/EE: all versions from 18.11 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

Thanks bate5a for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-105458 - Governance Control Bypass issue in Duo Agent Platform impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.

Impacted Versions: GitLab EE: all versions from 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

This vulnerability has been discovered internally by GitLab team member Rahul Barnwal.

CVE-2026-5954 - Incorrect Authorization issue in package registry impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 15.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

Thanks rogerace for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-92528 - Incorrect Authorization issue in merge request approval eligibility check impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identity resolution.

Impacted Versions: GitLab EE: all versions from 16.11 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

This vulnerability has been discovered internally by GitLab team member Kenneth Chu.

CVE-2026-78335 - Incorrect Authorization issue in fine-grained personal access tokens impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token’s scope, due to incorrect authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 19.1 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

Thanks mahoraga007 for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-100104 - Server Side Request Forgery (SSRF) issue in repository import impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.

Impacted Versions: GitLab CE/EE: all versions from 10.3 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 3.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N)

This vulnerability has been discovered internally by GitLab team member Félix Veillette-Potvin.

CVE-2026-82632 - Incorrect Authorization issue in project import impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal Access Token scoped only to user-boundary import permissions to import projects into group namespaces beyond the token’s intended scope, due to incorrect authorization of the import target namespace.

Impacted Versions: GitLab CE/EE: all versions from 18.9 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 3.1 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)

Thanks aur0r4_glyph for reporting this vulnerability through our HackerOne bug bounty program.

CVE-2026-103549 - Incorrect Authorization issue in Package Registry impacts GitLab CE/EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.

Impacted Versions: GitLab CE/EE: all versions from 17.6 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 2.7 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)

This vulnerability has been discovered internally by a GitLab team member.

CVE-2026-9268 - Improper Access Control issue in project CI/CD settings impacts GitLab EE

GitLab has remediated an issue that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper authorization, due to insufficient access control checks.

Impacted Versions: GitLab EE: all versions from 13.6 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2
CVSS 2.7 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)

Thanks akashhamal0x01 for reporting this vulnerability through our HackerOne bug bounty program.

Bug fixes

19.4.2

• Install tzdata and tzdata-legacy in gitlab-base
• Add Ruby regexp program size patch for 3.3 and 3.4 [19.4]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.4]
• Backport of ‘Add rate limit handling to imports from GHES’ to 19.4
• Backport of ‘Retry transient HttpIO chunk failures’ (19.4)
• Backport of “Fix any_merge_request policy violations stuck in running on fork MRs”
• Backport of ‘Update dependency gitlab-fog-azure-rm to v2.5.2’ to 19-4
• Backport of “Verify legacy uploads on Geo secondaries by reading the file”
• Backport 19.4 What’s new entries to 19.4 stable branch
• Backport of ‘Make git exclusions in rate limit rules unconditional again’ into 19-4-stable-ee
• Backport of ‘Fix work item status category not updating when a status is re-added’
• Backport of ‘Fix status filter dropping matching items’
• Backport of “DAP flow execution image: registry prefix with path (e.g., Harbor proxy) treated as full image reference”
• Truncate Jira issue keys at the per-entity API limit (19.4)
• Backport of Sign chat agent requests from the chat feature setting and Sign chat tool requests from the resolved feature setting to 19.4
• Backport of ‘Serve the Orbit MCP server without the mcp_client feature flag’ to 19.4
• Backport of ‘Speed up assignee and reviewer pickers for Duo service accounts’
• Backport of ‘Stop coverage delta timeouts from breaking the MR widget’
• Backport of ‘Fix file tree links missing relative URL root’ to 19.4
• Backport of ‘Align self-managed Restricted access with User.billable’
• Backport of ‘Send canonical timezone identifiers to Gitaly’
• Backport of ‘Authenticate self-hosted billing events with CustomersDot token’ to 19.4
• Backport 19.4: Tolerate malformed Content-Range in HttpIO
• Backport of ‘Fix file tree search missing relative URL root’ to 19.4
• Backport of ‘Allow security policy bot cross-project container registry access’ to 19.4
• Backport of ‘Fix Gitaly up-to-date check for versions with a Git revision suffix’
• Fix registry DB migration log accumulation
• Add Ruby regexp program size patch for 3.3 and 3.4 [19.4]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.4]

19.3.4

• Bump ElasticSearch version
• Add Ruby regexp program size patch for 3.3 and 3.4 [19.3]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.3]
• Backport of ‘Resolve orphan artifact lookups in one query per batch’
• Backport of ‘Specify low urgency of getPipelineDetails query’ to 19.3
• 19.3 Backport of ‘Remove merge_request from Developer default triggers’
• Backport ‘Drop system failure assertion in secrets specs’ to 19-3-stable-ee
• Backport of ‘Stop dependency proxy requests counting against the web rate limit’
• Backport of ‘Update GitLab Elasticsearch Indexer to 5.14.14’ to 19.3
• Backport of ‘Add application setting to block JWT for reclaimed project paths’
• Backport of ‘Resume mid-delta on the package metadata label path’ into 19-3-stable-ee
• Backport of ‘Retry transient HttpIO chunk failures’ (19.3)
• Backport of ‘Update dependency gitlab-fog-azure-rm to v2.5.2’ to 19-3
• Backport of “Verify legacy uploads on Geo secondaries by reading the file”
• Backport of ‘Make git exclusions in rate limit rules unconditional again’ into 19-3-stable-ee
• Backport of ‘Delete approval policy reads before their project rules’ and two related orphaned-read fixes to 19.3
• Backport of ‘Batch the push commit overlap lookup in RefreshService’ (19.3)
• Backport of ‘Skip the post-merge diff commit preload in RefreshService’ (19.3)
• Backport of ‘Fix work item status category not updating when a status is re-added’
• Backport of ‘Fix status filter dropping matching items’
• Backport of ‘Serve the Orbit MCP server without the mcp_client feature flag’ to 19.3
• Backport of “DAP flow execution image: registry prefix with path (e.g., Harbor proxy) treated as full image reference”
• Backport of Sign chat agent requests from the chat feature setting and Sign chat tool requests from the resolved feature setting to 19.3
• Backport of ‘Speed up assignee and reviewer pickers for Duo service accounts’
• Truncate Jira issue keys at the per-entity API limit (19.3)
• Backport of ‘Stop coverage delta timeouts from breaking the MR widget’
• Backport of ‘Align self-managed Restricted access with User.billable’
• Backport of ‘Fix file tree links missing relative URL root’ to 19.3
• Backport 19.3: Tolerate malformed Content-Range in HttpIO
• Backport of ‘Fix file tree search missing relative URL root’ to 19.3
• Fix registry DB migration log accumulation
• Bumps Elastic Search version
• Add Ruby regexp program size patch for 3.3 and 3.4 [19.3]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.3]

19.2.8

• Add Ruby regexp program size patch for 3.3 and 3.4 [19.2]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.2]
• Backport of ‘Update dependency gitlab-fog-azure-rm to v2.5.2’ to 19-2
• Backport of “Verify legacy uploads on Geo secondaries by reading the file”
• Backport of ‘Delete approval policy reads before their project rules’ and two related orphaned-read fixes to 19.2
• Backport of ‘Fix work item status category not updating when a status is re-added’
• Truncate Jira issue keys at the per-entity API limit (19.2)
• Backport of ‘Fix status filter dropping matching items’
• Backport of Sign chat agent requests from the chat feature setting and Sign chat tool requests from the resolved feature setting to 19.2
• Backport of ‘Fix file tree links missing relative URL root’ to 19.2
• Backport of ‘Align self-managed Restricted access with User.billable’
• Backport 19.2: Tolerate malformed Content-Range in HttpIO
• Backport of ‘Fix file tree search missing relative URL root’ to 19.2
• Fix registry DB migration log accumulation
• Add Ruby regexp program size patch for 3.3 and 3.4 [19.2]
• Add Ruby regexp repeat-range double-free patch for 3.3 and 3.4 [19.2]

Important notes on upgrading

This patch includes database migrations that may impact your upgrade process.

Impact on your installation:

• Single-node instances: This patch will cause downtime during the upgrade as migrations must complete before GitLab can start.
• Multi-node instances: With proper zero-downtime upgrade procedures, this patch can be applied without downtime.

Post-deploy migrations

The following versions include post-deploy migrations that can run after the upgrade:

• 19.3.4

To learn more about the impact of upgrades on your installation, see:

• Zero-downtime upgrades for multi-node deployments
• Standard upgrades for single-node installations

Updating

To update GitLab, see the Update page. To update GitLab Runner, see the Updating the Runner page.

Receive Patch Notifications

To receive patch blog notifications delivered to your inbox, visit our contact us page. To receive release notifications via RSS, subscribe to our patch release RSS feed or our RSS feed for all releases.