Security Advisory

CVE-2025-14103

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-25 19:33:35
Last updated 2026-02-25 20:52:22
Assigner GitLab
CVSS score 4.3
State PUBLISHED

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthorized user with Developer-role permissions to set pipeline variables for manually triggered jobs under certain conditions.