CVE-2019-5462: GitLab

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

Affected products

• GitLab GitLab: from 9.0.0, before 11.11.7 (fixed in 11.11.7)

Published 2020-01-28. Last modified 2026-06-17.