# CVE-2025-9222: GitLab CE/EE stored XSS in GitLab Flavored Markdown placeholders

Source: https://junglewise.ai/threats/cve-2025-9222-gitlab-ce-ee-stored-xss-in-gitlab-flavored-markdown-placeholders  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-09. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2025-9222 · Severity: high · CVSS 8.7 · Published 2026-01-09

GitLab has fixed a high-severity security flaw in its Community and Enterprise editions that could allow a logged-in user to execute malicious scripts in the browsers of other users. This occurs when the platform processes specially formatted text (Markdown) used in comments, issues, or descriptions. If exploited, an attacker could potentially steal session information or perform unauthorized actions on behalf of other users, including administrators.

Technologies: [GitLab Community Edition](https://junglewise.ai/threats/technologies/gitlab-ce), [GitLab Enterprise Edition](https://junglewise.ai/threats/technologies/gitlab-ee). Vendors: [GitLab](https://junglewise.ai/threats/vendors/gitlab).

## Quick answers

**Is CVE-2025-9222 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-9222 being exploited in the wild.

**How severe is CVE-2025-9222?** High severity, with a CVSS score of 8.7, published 9 January 2026.

**Which products and versions are affected?** GitLab Community Edition 18.2.2 to 18.5.4, 18.6.0 to 18.6.2, 18.7.0; GitLab Enterprise Edition 18.2.2 to 18.5.4, 18.6.0 to 18.6.2, 18.7.0.

**Is there a fix for CVE-2025-9222?** A patch was published on 2026-01-07: GitLab released versions 18.7.1, 18.6.3, and 18.5.5 containing the fix. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-9222 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2025-9222?** Check whether you run GitLab Community Edition or GitLab Enterprise Edition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stored cross-site scripting (XSS) vulnerability exists in GitLab CE/EE due to improper neutralization of input during the processing of GitLab Flavored Markdown (GLFM) placeholders. An authenticated attacker can exploit this by injecting malicious scripts into Markdown-enabled fields (such as issue descriptions or comments). When other users view the affected content, the script executes in their browser context. This vulnerability is assigned a CVSS score of 8.7 because it allows for a scope change (S:C), potentially leading to full compromise of the victim's session. The issue is fixed in versions 18.5.5, 18.6.3, and 18.7.1.

## Affected products

- GitLab GitLab Community Edition (CE) 18.2.2 to 18.5.4, 18.6.0 to 18.6.2, 18.7.0
- GitLab GitLab Enterprise Edition (EE) 18.2.2 to 18.5.4, 18.6.0 to 18.6.2, 18.7.0

## Timeline

- 2026-01-07: patched: GitLab released versions 18.7.1, 18.6.3, and 18.5.5 containing the fix.
- 2026-01-09: disclosed: Public disclosure of CVE-2025-9222.

## References

- [https://about.gitlab.com/releases/2026/01/07/patch-release-gitlab-18-7-1-released/](https://about.gitlab.com/releases/2026/01/07/patch-release-gitlab-18-7-1-released/)
- [https://gitlab.com/gitlab-org/gitlab/-/issues/562561](https://gitlab.com/gitlab-org/gitlab/-/issues/562561)
- [https://hackerone.com/reports/3297483](https://hackerone.com/reports/3297483)
- [https://access.redhat.com/security/cve/CVE-2025-9222](https://access.redhat.com/security/cve/CVE-2025-9222)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2428222](https://bugzilla.redhat.com/show_bug.cgi?id=2428222)
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9222.json](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9222.json)

## Related threats

- [GitLab EE incomplete enforcement of SAML/LDAP membership lock](https://junglewise.ai/threats/cve-2026-16255-gitlab-has-remediated-an-issue-in-gitlab-ee-affecting-all)
- [GitLab cache poisoning in OAuth/OIDC discovery](https://junglewise.ai/threats/cve-2026-112212-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all)
- [GitLab EE prompt injection in AI agent instructions](https://junglewise.ai/threats/cve-2026-96893-gitlab-has-remediated-an-issue-in-gitlab-ee-affecting-all)
- [GitLab CE/EE improper authorization in package registry](https://junglewise.ai/threats/cve-2026-5954-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all)
- [GitLab improper authorization in downstream pipeline creation](https://junglewise.ai/threats/cve-2026-16301-gitlab-has-remediated-an-issue-in-gitlab-ce-ee-affecting-all)