⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

GitLab High-Severity CSRF in GraphQL Multiplex Query Handler

August 17, 2026

A high-severity CSRF vulnerability in GitLab's GraphQL multiplex query handler could allow unauthenticated users to execute mutations via GET requests due to improper request validation. Requires user interaction. CVSS score 7.1.