CVE-2026-13151
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19...
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
What each source reports
GitHub Advisories Score usedGHSA-qfqq-fmmm-p2r3
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19...
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to modify group-level settings beyond their intended permissions due to improper authorization controls.
- Record
GHSA-qfqq-fmmm-p2r3- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2026-13151- Updated
- 2026-11-02
EUVDEUVD-2026-42403
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
EUVD-2026-42403- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
NVD No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2026-13151- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-13151
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
UBUNTU-CVE-2026-13151- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVBIT-gitlab-2026-13151 No score
Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to modify group-level settings beyond their intended permissions due to improper authorization controls.
- Record
BIT-gitlab-2026-13151- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-13151 has been rejected by its source and should not be treated as a live vulnerability, published July 8, 2026. Fixed in gitlab 18.11.7.