Cloudanix VulnDB

CVE-2025-11246

Medium · 5.4

CVSS

5.4

EPSS

0.4%

Published

Jan 9, 2026

CISA due date

—

The record

Insufficient Granularity of Access Control in GitLab

Affected packages

Ecosystem Package Introduced Fixed
Bitnami gitlab 15.4.0 18.5.5
Chainguard gitlab-rails-ce-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-assets-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-assets-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-assets-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-assets-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-assets-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-assets-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-18.1 0 18.1.6-r3
Chainguard gitlab-rails-ce-doc-18.2 0 18.2.8-r3
Chainguard gitlab-rails-ce-doc-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-doc-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-doc-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-doc-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-doc-fips-18.4 0 18.4.6-r1
Chainguard gitlab-rails-ce-fips-18.1 0 18.1.6-r4
Chainguard gitlab-rails-ce-fips-18.2 0 18.2.8-r4
Chainguard gitlab-rails-ce-fips-18.3 0 18.3.6-r2
Chainguard gitlab-rails-ce-fips-18.4 0 18.4.6-r1
Chainguard gitlab-workhorse-ce-18.1 0 18.1.6-r3
Chainguard gitlab-workhorse-ce-18.2 0 18.2.8-r3
Chainguard gitlab-workhorse-ce-18.3 0 18.3.6-r2
Chainguard gitlab-workhorse-ce-18.4 0 18.4.6-r0
Chainguard gitlab-workhorse-ce-fips-18.1 0 18.1.6-r4
Chainguard gitlab-workhorse-ce-fips-18.2 0 18.2.8-r3

Related vulnerabilities