CVE-2026-112378

{
  "id": "CVE-2026-112378",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-22T01:16:58.000",
  "lastModified": "2026-11-04T23:10:00.223",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks."
    },
    {
      "lang": "es",
      "value": "GitLab ha remediado un problema en GitLab EE que afecta a todas las versiones desde la 17.8 hasta versiones anteriores a la 19.3.6, la 19.4 hasta versiones anteriores a la 19.4.3, y la 19.5 hasta versiones anteriores a la 19.5.1 que bajo ciertas condiciones podría haber permitido a un usuario autenticado acceder a funciones de IA de pago sin una suscripción válida debido a una validación insuficiente en el lado del servidor en las comprobaciones de elegibilidad de facturación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "GitLab",
          "product": "GitLab",
          "defaultStatus": "unaffected",
          "cpes": [
            "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
          ],
          "repo": "https://gitlab.com/gitlab-org/gitlab",
          "versions": [
            {
              "version": "17.8",
              "lessThan": "19.3.6",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "19.4",
              "lessThan": "19.4.3",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "19.5",
              "lessThan": "19.5.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-10-30T17:34:10.092540Z",
          "id": "CVE-2026-112378",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-348"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
              "versionStartIncluding": "17.8.0",
              "versionEndExcluding": "19.3.6",
              "matchCriteriaId": "8A1CF46C-81B4-41DE-96B3-CA8E65D050F0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
              "versionStartIncluding": "19.4.0",
              "versionEndExcluding": "19.4.3",
              "matchCriteriaId": "30C796E1-40AA-41AF-8186-A49F78DC528D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:gitlab:gitlab:19.5.0:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "7D6BE6DD-CA49-4E20-9541-22477632BA5D"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/",
      "source": "[email protected]",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/634027",
      "source": "[email protected]",
      "tags": [
        "Permissions Required"
      ]
    }
  ]
}