CVE-2026-11379

—

CVSS 3.1

5.3 medium

EPSS

<1%p22

Published

Jun 25, 2026 (Jun 25, 2026)

Modified

Jun 26, 2026

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.

Vendors: gitlab
Products: gitlab
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.