CVE-2026-19478 | GitLab up to 18.11.10/19.0.7/19.1.5/19.2.3 GraphQL Directive authorization (WID-SEC-2026-2882)

A vulnerability was found in GitLab up to 18.11.10/19.0.7/19.1.5/19.2.3. It has been declared as critical. This affects an unknown part of the component GraphQL Directive. The manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026-19478. The attack may be launched remotely. There is no exploit available. It is...