THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-87719 (CRITICAL 9.9) — GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensit

[NVD] CVE-2026-87719 (CRITICAL 9.9) — GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensit

mednvdPublished 2026-09-12

CVE-2026-87719 CVSS: 9.9 CRITICAL Published: 2026-09-12T03:16:31.477

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using a specially crafted GraphQL

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-87719cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-87719