CVE-2026-112212highCWE-444

CVE-2026-112212: high-severity vulnerability in GitLab

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab

Published · Updated

Follow this CVE+ Monitor GitLab

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. It has an official Brazilian government alert.

ssvc Trackcvss 7.5epss 0.2%
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · RECOMENDAÇÃO 19/2026 · 22 Oct 2026Recomendação Técnica – Múltiplas Vulnerabilidades Críticas no GitLab CE/EEread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an externally controlled server, due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L
Affected products
GitLab · GitLab
Related CVEs — GitLab

In the same product, most dangerous first.

CVE-2021-22205CRITICALCVE-2021-22205EPSS 99.7%KEVCVE-2026-85706CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 97.4%KEVCVE-2023-7028CRITICALWeak Password Recovery Mechanism for Forgotten Password in GitLabEPSS 94.5%KEVCVE-2021-22175MEDIUMCVE-2021-22175EPSS 53.4%KEVCVE-2021-39935MEDIUMCVE-2021-39935EPSS 36.1%KEVCVE-2026-97229CRITICALInteger Overflow or Wraparound in GitLabEPSS 27.3%KEV