NetSight
medium6.5

CVE-2025-7691

A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 …

Impact

A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access to additional system capabilities.

Affected products

VendorProductAffected versions
GitlabGitlab
from 16.6.0 before 18.2.7
from 18.3.0 before 18.3.3
Version 18.4.0

Weakness classification

References