Executive brief
GitLab, a platform used for software development and version control, has addressed a security flaw that could allow unauthorized Jira subscriptions to be created. By tricking a logged-in user into clicking a malicious link, an attacker could link the user's workspace to an external Jira account without their consent. This could lead to unauthorized data synchronization or integration between the two platforms.
Technical details
A Cross-Site Request Forgery (CSRF) vulnerability exists in GitLab CE/EE due to missing protection on the Jira subscription creation endpoint. An unauthenticated attacker can exploit this by crafting a malicious link and inducing an authenticated user to visit it. Successful exploitation allows the attacker to create unauthorized Jira subscriptions within the targeted user's namespace. The issue affects versions starting from 11.10 and has been patched in versions 18.9.7, 18.10.6, and 18.11.3.
Affected products
- GitLab GitLab Community Edition (CE) / Enterprise Edition (EE) 11.10 to < 18.9.7, 18.10 to < 18.10.6, 18.11 to < 18.11.3
Timeline
- 2026-05-13: patched: GitLab released versions 18.9.7, 18.10.6, and 18.11.3 to address the issue.
- 2026-05-14: disclosed: Public disclosure of CVE-2026-4527.