GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
GitLab · Community and Enterprise Editions
Date added (CISA)
2026-02-03
Remediation due
2026-02-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.