CVE-2026-101168

MediumCVSS 6.2/10Last modified Oct 14, 2026

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to insertion of sensitive request data into log files and error tracking events.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 14, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1011698.7In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafteCVE-2026-101174.3A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-seCVE-2026-1011704.0DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011713.6Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect CVE-2026-1011726.2Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.CVE-2026-1011736.5DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011745.7DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011754.3Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011767.1Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affeCVE-2026-1011773.7Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentCVE-2026-1011786.6Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service coCVE-2026-1011794.7Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101168: Medium severity, CVSS 6.2 | Vulnix