A vulnerability, which was classified as critical , was found in GitLab Community Edition and Enterprise Edition up to 18.10.7/18.11.4/19.0.1 . This affects an unknown part. Executing a manipulation can lead to server-side request forgery. This vulnerability is tracked as CVE-2026-9204 . The attack can be launched remotely. No exploit exists. You should upgrade the affected component.