CVE-2026-11379 | GitLab has remediated an issue in GitLab EE affecting all ve… | CVSS 5.3 MEDIUM

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.

Metadata

CVE ID: CVE-2026-11379
State: PUBLISHED
Assigner: GitLab
Reserved: 2026-06-05 12:50 UTC
Published: 2026-06-25 04:33 UTC
Last updated: 2026-06-25 04:33 UTC
Primary CWE: CWE-863
CWE-863: Incorrect Authorization
Vendor / Product: GitLab / GitLab
Sources: cve.org · NVD

Severity & Metrics

5.3 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products (1)

Vendor	Product	Platform	Versions
GitLab	GitLab	—	13.11 < 18.11.6, 19.0 < 19.0.3, 19.1 < 19.1.1

Weakness (CWE)

CWE	Source	Description
CWE-863	cna	CWE-863: Incorrect Authorization

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.3	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References (2)