CVE-2026-14288

LOW Status: Received

CVSS Scores

CVSS v3.x Base Score
3.1
LOW

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access control during approval rule synchronization.

Published
October 22, 2026 1:16 AM
Last Modified
October 22, 2026 1:16 AM
Source
[email protected]

Weaknesses (CWE)

CWE-706

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry