CVE-2026-7767
Received Received - Intake

Authenticated Kubernetes Token Exposure in GitLab CE/EE

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: GitLab Inc.

Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-7767
EUVD
EUVD-2026-98228

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
GitLab GitLab 13.11
GitLab GitLab 19.3
GitLab GitLab 19.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-601 The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in GitLab CE/EE allows an authenticated user who controls a Kubernetes agent to send sensitive authentication tokens to an unintended server. This happens due to improper redirect validation in the Kubernetes proxy, which fails to properly handle redirects in certain conditions.

Detection Guidance

This vulnerability involves improper redirect validation in GitLab's Kubernetes proxy, potentially exposing authentication tokens. To detect it, check GitLab server logs for unusual redirect patterns or unauthorized token transmissions. Verify Kubernetes agent configurations for unexpected server endpoints. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to gain access to sensitive authentication tokens, potentially leading to unauthorized access to other systems or data. This could compromise the security of your Kubernetes clusters and the applications running on them.

Compliance Impact

This vulnerability could lead to unauthorized exposure of sensitive authentication tokens, which may result in data breaches. Such breaches can violate compliance requirements under GDPR (data protection) and HIPAA (health information security) by exposing personal or protected health data. The improper redirect validation in the Kubernetes proxy increases the risk of unauthorized access to sensitive information.

Mitigation Strategies

Upgrade GitLab CE/EE to version 19.2.8, 19.3.5, or 19.4.2 or later to address the improper redirect validation in the Kubernetes proxy that could expose authentication tokens.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7767. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart