CVE-2026-89078 is listed by GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 23, 2026 · GitLab Security Releases

   Detected

   On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to t

Sources

• CVE.orgVulnerability recordCVE-2026-89078

  Official CVE identifier

  cve.org
• GitLab Security ReleasesVendor advisoryCVE-2026-89078

  On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of th

  docs.gitlab.com