GitLab Patch Release: 18.10.3, 18.9.5, 18.8.9

GitLab released patch versions 18.10.3, 18.9.5, and 18.8.9 to address critical security vulnerabilities affecting both Community and Enterprise editions.

• •Multiple high-severity vulnerabilities including exposed methods in websocket connections (CVE-2026-5173, CVSS 8.5) allowing authenticated users to invoke unintended server-side methods
• •Denial of Service issues in Terraform state lock API, GraphQL API, and CSV import affecting versions from 11.7 onwards
• •Authorization bypass vulnerabilities in vulnerability flags AI detection API, custom role permissions, and Environments API enabling privilege escalation
• •Information disclosure vulnerabilities in GraphQL queries, CSV exports, and Code Quality reports exposing sensitive user data
• •