CVE-2025-12073: GitLab

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery against internal services by bypassing protections in the Git repository import functionality.

Affected products

• GitLab GitLab: from 18.0.0, before 18.6.6 (fixed in 18.6.6); from 18.7.0, before 18.7.4 (fixed in 18.7.4); from 18.8.0, before 18.8.4 (fixed in 18.8.4)

Published 2026-02-11. Last modified 2026-06-17.