Vulnerability Details CVE-2026-105777
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal response headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 15.5%
CVSS Severity
CVSS v3 Score 4.3