GitLab EE: authenticated user with certain permissions can hijack another project's CI runners

Impact

An authenticated attacker holding specific project permissions can take over runners registered to projects they do not own. A hijacked runner executes the attacker's job definitions on the victim project's executor, which in a GPU shop is a privileged build host or a GPU-equipped CI node with registry push credentials, cloud tokens and cached source. That turns a permissions bug in the SCM into code execution on fleet infrastructure and a route into other teams' pipelines. GitLab scores it high on all three of confidentiality, integrity and availability.

Who can reach it

An authenticated GitLab user with specific project permissions - no administrator access needed. GitLab EE only; CE is not listed as affected.

What to do

Upgrade to GitLab 18.3.5, 18.4.3 or 18.5.1 depending on your branch; all EE versions from 17.1 up to those are affected. This is a GitLab application upgrade and service restart, not a fleet-wide maintenance window. Afterwards, review which runners are registered where and rotate credentials held by any runner that could have been hijacked.

References

Related entries

• Veeam Backup & Replication: Remote code execution reachable by any domain user on a domain-joined backup serverCVE-2025-23120 · Veeam Backup & ReplicationHigh
• Veeam Backup & Replication: Authenticated domain user achieves remote code execution on the Backup ServerCVE-2025-23121 · Veeam Backup & ReplicationHigh
• Dell OpenManage Network Integration (RADIUS auth bypass): An attacker on the local network forges a valid RADIUS AcceptCVE-2025-36593 · Dell OpenManage Network Integration (RADIUS auth bypass)High
• Commvault Web Server: Remote authenticated attacker creates and executes webshellsCVE-2025-3928 · Commvault Web ServerHigh
• Linux iommu/amd - race while increasing host page table level: The AMD IOMMU host page table implementation supportsCVE-2025-39961 · Linux iommu/amd - race while increasing host page table levelHigh
• Linux kernel NFSD: copynotify stateid outlives its parent open, corrupting the laundromat listCVE-2025-40273 · Linux kernel NFSD (NFSv4.2 COPY_NOTIFY stateid lifetime)High