CVE-2025-8770

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-8770
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8770.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-8770
Aliases
Downstream
Published
2025-08-13T17:26:10.817Z
Modified
2025-12-05T10:58:00.905169Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Authorization Bypass Through User-Controlled Key in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated users with specific access to bypass merge request approval policies by manipulating approval rule identifiers.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8770.json",
    "cwe_ids": [
        "CWE-639"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
504fd9e5236e13d674e051c6b8a1e9892b371c58
Fixed
85327bfea0841b1eda70dc49b76918681510f967
Database specific 
{
    "versions": [
        {
            "introduced": "18.0"
        },
        {
            "fixed": "18.0.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
e0f3b86408aa4e7f03b63ac9e7dba6de1df14e93
Fixed
693bb5e6ca55d16970747e6a3157ab801608b758
Database specific 
{
    "versions": [
        {
            "introduced": "18.1"
        },
        {
            "fixed": "18.1.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
64403a0daee4413eb45b939590f37c351b8e72bf
Fixed
bef324d0853760755341c3ea7ca9469e4d962377
Database specific 
{
    "versions": [
        {
            "introduced": "18.2"
        },
        {
            "fixed": "18.2.2"
        }
    ]
}

Affected versions

v18.*

v18.0.0-ee
v18.0.1-ee
v18.0.2-ee
v18.0.3-ee
v18.0.4-ee
v18.0.5-ee
v18.1.0-ee
v18.1.1-ee
v18.1.2-ee
v18.1.3-ee
v18.2.0-ee
v18.2.1-ee