{"id":"CVE-2026-112378","kind":"vulnerability","aliases":["CVE-2026-112378"],"related":[],"title":"GitLab EE: authenticated users reach paid AI features without subscription","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side validation in billing eligibility checks.","summary":"GitLab EE's server-side billing eligibility checks were insufficient in some conditions, letting a logged-in user use paid AI features without a valid subscription. The impact is unpaid use of paid features rather than code execution or data exposure.","severity":"medium","cvss":4.3,"epss":0.00123,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["billing","gitlab","self-hosted","vendor"],"not_affected_if":["gitlab-ce","managed-hosting"],"how_to_check":"- Check the installed GitLab EE version against the affected range (`17.8` up to `19.3.6`, `19.4` before `19.4.3`, `19.5` before `19.5.1`), for example with `gitlab-rake gitlab:env:info` or the version shown in the Admin Area.","fix":"- Upgrade GitLab EE to `19.3.6`, `19.4.3`, `19.5.1` or later, matching your release line.","status":"open","published_at":"2026-10-22T01:16:58+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T04:37:33+00:00","updated_at":"2026-10-25T04:37:33+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:37:33Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade GitLab EE to `19.3.6`, `19.4.3`, `19.5.1` or later, matching your release line.","reach":"network","title":"GitLab EE: authenticated users reach paid AI features without subscription","impact":"low","summary":"GitLab EE's server-side billing eligibility checks were insufficient in some conditions, letting a logged-in user use paid AI features without a valid subscription. The impact is unpaid use of paid features rather than code execution or data exposure.","category":"vendor","nicknames":[],"who_cares":["gitlab","self-hosted","billing"],"confidence":0.6,"needs_auth":"yes","worst_case":"Authenticated users access paid AI features without a subscription","analyst_note":"","how_to_check":"- Check the installed GitLab EE version against the affected range (`17.8` up to `19.3.6`, `19.4` before `19.4.3`, `19.5` before `19.5.1`), for example with `gitlab-rake gitlab:env:info` or the version shown in the Admin Area.","needs_analyst":false,"not_affected_if":["managed-hosting","gitlab-ce"],"who_is_affected":"Self-managed GitLab EE instances on the affected version ranges that have users with accounts and paid AI features in scope. GitLab.com-hosted instances are handled by the vendor, and instances on versions outside the listed ranges are not affected per the description.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000602,"input_tokens":3391,"output_tokens":525,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112378':13A,16A '-2026':12A,15A '17.8':78C '19.3.6':80C '19.4':81C '19.4.3':83C '19.5':85C '19.5.1':87C 'access':99C 'affect':74C 'ai':7A,45B,101C 'allow':94C 'authent':3A,96C 'bill':17B,29B,115C 'certain':90C 'check':31B,117C 'code':61B 'condit':36B,91C 'could':92C 'cve':11A,14A 'data':64B 'due':107C 'ee':2A,24B,73C 'elig':30B,116C 'execut':62B 'exposur':65B 'featur':8A,46B,58B,102C 'gitlab':1A,18B,23B,66C,72C 'host':21B 'impact':52B 'insuffici':33B,109C 'issu':70C 'let':37B 'log':40B 'logged-in':39B 'paid':6A,44B,57B,100C 'rather':59B 'reach':5A 'remedi':68C 'self':20B 'self-host':19B 'server':27B,111C 'server-sid':26B,110C 'side':28B,112C 'subscript':10A,50B,106C 'unpaid':54B 'use':43B,55B 'user':4A,42B,97C 'valid':49B,105C,113C 'vendor':22B 'version':76C 'without':9A,47B,103C","nicknames":[],"mitigations":[],"who_affected":"Self-managed GitLab EE instances on the affected version ranges that have users with accounts and paid AI features in scope. GitLab.com-hosted instances are handled by the vendor, and instances on versions outside the listed ranges are not affected per the description.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T01:16:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss_by":"cve@gitlab.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112378","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112378","severity":null,"published_at":"2026-10-22T01:16:58+00:00","modified_at":"2026-10-22T16:18:19+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-112378","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-112378","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:52+00:00","fetched_at":"2026-10-24T07:15:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}