GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to cause Denial of Service by uploading a malicious file and repeatedly querying it through GraphQl.
References
| Link | Resource |
|---|---|
| https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/ | Release Notes Vendor Advisory |
| https://gitlab.com/gitlab-org/gitlab/-/issues/587546 | Broken Link Issue Tracking |
| https://hackerone.com/reports/3515994 | Broken Link |
Configurations
Configuration 1 (hide)
|
History
12 Feb 2026, 21:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* | |
| References | () https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/ - Release Notes, Vendor Advisory | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/587546 - Broken Link, Issue Tracking | |
| References | () https://hackerone.com/reports/3515994 - Broken Link | |
| First Time |
Gitlab
Gitlab gitlab |
11 Feb 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-11 12:16
Updated : 2026-02-12 21:34
NVD link : CVE-2026-1387
Mitre link : CVE-2026-1387
CVE.ORG link : CVE-2026-1387
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-770
Allocation of Resources Without Limits or Throttling