CVE-2025-8279CWE-306

Missing Authentication for Critical Function in GitLab Language Server

High · published July 28, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-07-28T14:04Z
EPSS history
Timeline
  • 28 JUL 14:04Z
    Missing Authentication for Critical Function in GitLab Language Server
    cvelistv5