Vulnerabilities CVE-2026-10053

CVE-2026-10053

High

Open

TLP:CLEAR

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package registry.

Details

CVSS Score: 8.5
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Confidence: 90%
Published: Aug 23, 2026
Last Modified: Aug 23, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.