medium
advisory
GitLab: Security policy bypass vulnerability
A vulnerability has been discovered in GitLab products that allows an attacker to cause a security policy bypass.
CVE search metadata
CVE search record: CVE-2026-111943. Severity: medium. CVSS: 6.8. EPSS: 0.30%. KEV: no. Product: AI Gateway, GitLab Community Edition, GitLab Enterprise Edition. Brief: GitLab: Security policy bypass vulnerability. Brief link: https://feed.craftedsignal.io/briefs/2026-10-gitlab-security-bypass/
Triage facts
Revision 1- Applicability
- AI Gateway, GitLab Community Edition +1
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 3 public sources
- Freshness
- Revision 1Oct 30, 21:20 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
A security policy bypass vulnerability has been identified in GitLab products. This flaw allows an attacker to bypass security policy controls. Users are advised to refer to the vendor's security bulletin for patch information.