CVE-2026-81839 is listed by GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 12, 2026 · GitLab Security Releases

   Detected

   On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). 19.3.4 had a bug that affected merge request pages when the Ona integration was enabled. This is fixed in 19.3.5. These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these vers

Sources

• CVE.orgVulnerability recordCVE-2026-81839

  Official CVE identifier

  cve.org
• GitLab Security ReleasesVendor advisoryCVE-2026-81839

  On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). 19.3.4 had a bug that affected merge request pages when the Ona integration was enabled. This is fixed in 19.3.5. These versions contain important bug a

  docs.gitlab.com