GitLab: unauthenticated GraphQL mutations executed via GET through multiplex query handling

Impact

Improper request validation in GraphQL multiplex handling lets mutations run over GET requests, which the record scores as reachable by an unauthenticated user with user interaction required — the classic shape of a link that a logged-in maintainer clicks and that then performs a state change as them. Against the GitLab instance that drives a GPU cluster's pipelines and GitOps repos, a mutation executed as a privileged user is a write into the deployment path. Integrity is rated high; confidentiality is unaffected. The affected range is wide, spanning 18.2 through 19.2.

Who can reach it

Unauthenticated attacker who can get a target with an active GitLab session to issue the request (UI:R in the vector); reachable over the network wherever the GitLab GraphQL endpoint is exposed.

What to do

Upgrade to GitLab 18.11.11, 19.0.8, 19.1.6 or 19.2.4 depending on your branch, then restart the service. This is a routine GitLab patch upgrade with no node maintenance; because the affected range goes back to 18.2, check which branch each self-managed instance and runner-adjacent deployment is on before scheduling.

References

Related entries

• MinIO (server-side encryption / replication): An authenticated tenant can inject SSE metadata through replicationCVE-2026-34204 · MinIO (server-side encryption / replication)High
• MinIO (S3 Select): A crafted S3 Select CSV query makes MinIO allocate memory without bound until the process isCVE-2026-39414 · MinIO (S3 Select)High
• RabbitMQ: super-stream binding-keys parsed before the permission check, one PUT kills the nodeCVE-2026-67408 · RabbitMQ (rabbitmq_stream_management super-stream binding-keys handler)High
• Jenkins Ivy Report Plugin: XXE in Ivy report parsing gives an authenticated user file read on the controllerCVE-2026-70448 · Jenkins Ivy Report Plugin (XML parser for Ivy report files)High
• Determined AI (master API, generic task kill/pause/unpause handlers): The generic task kill, pause and unpauseCVE-2026-75109 · Determined AI (master API, generic task kill/pause/unpause handlers)High
• Jenkins ThinBackup plugin: attacker redirects backups and pulls arbitrary controller files into themCVE-2026-84667 · Jenkins ThinBackup plugin (backup configuration writable via Stapler data binding)High