GitLab CE/EE: improper internal response header filtering exposes internal server credentials

Impact

Under conditions GitLab does not detail, internal response headers were not filtered before being returned, allowing retrieval of sensitive internal server credentials. For a GPU operator this matters because GitLab is usually the CI/CD and registry front door to the fleet: credentials recovered from it can lead to job runners that execute on GPU nodes and to container images those nodes pull. The advisory describes disclosure only, with no integrity or availability impact, and the affected range is wide - 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1. GitLab's text says an unauthenticated user could retrieve the credentials while the published CVSS vector requires low privileges; treat the lower bar as the planning assumption.

Who can reach it

A caller able to reach the GitLab web interface and elicit the affected response. GitLab's description says unauthenticated; the scored vector states PR:L. Any self-managed instance exposed beyond the management network should be assumed reachable.

What to do

Upgrade self-managed GitLab to 19.5.1, 19.4.3, or 19.3.6 and restart the services - the normal GitLab patch and reconfigure cycle, no fleet-wide maintenance. After patching, rotate any internal credentials the instance held, since the advisory does not say whether disclosure can be detected after the fact.

References

Related entries

• Jenkins: symlink following during item rename discloses arbitrary controller filesCVE-2026-117615 · Jenkins core (item rename directory copy, symlink following)Medium
• GitLab: group milestones API returns private-project milestone metadata without membershipCVE-2026-13319 · GitLab CE/EE group milestones API (project filter authorization)Medium
• GitLab CE/EE: malformed CSV import lets an authenticated user stall Sidekiq workersCVE-2026-1403 · GitLab CE/EE (CSV import, Sidekiq worker)Medium
• PostgreSQL pgcrypto: PGP functions emit recoverable cleartext when OpenSSL disables the cipherCVE-2026-14663 · PostgreSQL pgcrypto (pgp_sym_encrypt / pgp_pub_encrypt family)Medium
• Grafana: read-only Git Sync users can change a connection's configuration via its status subresourceCVE-2026-15577 · Grafana Git Sync provisioning (connection status subresource)Medium
• Keycloak: authenticated user can exhaust server memory via unbounded Prometheus metric labelsCVE-2026-16100 · Keycloak (user-event Prometheus metrics)Medium