CVE-2026-12053CWE-532

Insertion of Sensitive Information into Log File in GitLab

High · published June 25, 2026

CVSS v3.1
8.6
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-06-25T04:33Z
EPSS history
Timeline
  • 25 JUN 04:33Z
    Insertion of Sensitive Information into Log File in GitLab
    cvelistv5