CVE-2026-112326

3.1 LOW

Published 2026-10-22 · Updated 2026-10-22

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to improper cleanup logic that failed to distinguish between pre-existing records from newly created ones during error handling.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE-460

All references

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
https://gitlab.com/gitlab-org/gitlab/-/work_items/633147

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-111103PoC
HIGHCVE-2026-61387PoC
HIGHCVE-2026-93710PoC
MEDIUMCVE-2026-96273PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.