Is CVE-2026-16627 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16627?

CVE-2026-16627 has a CVSS v3 severity of HIGH (7.7).

Back

CVE-2026-16627

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper sanitization of HTML content rendered in a CI job modal.