CVE-2026-15723highCWE-90

CVE-2026-15723: high-severity vulnerability in GitLab

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab

Published · Updated

Follow this CVE+ Monitor GitLab

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has an official Brazilian government alert and has a public proof of concept.

ssvc Attendcvss 8.2epss 0.4%
from disclosure to weapon7 days
Published on NVDOct 21
1st PoC+7d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · RECOMENDAÇÃO 19/2026 · 22 Oct 2026Recomendação Técnica – Múltiplas Vulnerabilidades Críticas no GitLab CE/EEread on gov.br ↗
  • CISC Gov.br · 22 Oct 2026Vulnerabilidade crítica de execução remota no Gitlabread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
GitLab · GitLab
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — GitLab

In the same product, most dangerous first.

CVE-2021-22205CRITICALCVE-2021-22205EPSS 99.7%KEVCVE-2026-85706CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 97.4%KEVCVE-2023-7028CRITICALWeak Password Recovery Mechanism for Forgotten Password in GitLabEPSS 94.5%KEVCVE-2021-22175MEDIUMCVE-2021-22175EPSS 53.4%KEVCVE-2021-39935MEDIUMCVE-2021-39935EPSS 36.1%KEVCVE-2026-97229CRITICALInteger Overflow or Wraparound in GitLabEPSS 27.7%KEV