{"id":"CVE-2026-12664","kind":"vulnerability","aliases":["CVE-2026-12664"],"related":[],"title":"GitLab: read_api token can bypass scope and create work items","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create work items, bypassing the token's restrictions, due to insufficient scope enforcement on a GraphQL field.","summary":"A GraphQL field in GitLab CE/EE does not enforce token scope, so a user holding a read_api-scoped token can fetch a project's incoming email address and create work items. The flaw is limited to authenticated users under certain conditions.","severity":"medium","cvss":6.8,"epss":0.00249,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci-cd","gitlab","self-hosted","vendor"],"not_affected_if":["auth-required","managed-hosting"],"how_to_check":"- Check the GitLab version with `gitlab-rake gitlab:env:info` or the Version line on the Admin Area page\n- Confirm whether the instance is in the affected range: 18.2 before `19.3.6`, 19.4 before `19.4.3`, or 19.5 before `19.5.1`","fix":"- Upgrade self-managed GitLab CE/EE to `19.3.6`, `19.4.3`, `19.5.1` or later within the matching release line\n- Rotate any read_api tokens if the instance was exposed to untrusted users before patching","status":"open","published_at":"2026-10-22T01:16:59+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","triaged_at":"2026-10-25T03:42:54+00:00","updated_at":"2026-10-25T03:42:54+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-25T03:42:54Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade self-managed GitLab CE/EE to `19.3.6`, `19.4.3`, `19.5.1` or later within the matching release line\n- Rotate any read_api tokens if the instance was exposed to untrusted users before patching","reach":"network","title":"GitLab: read_api token can bypass scope and create work items","impact":"low","summary":"A GraphQL field in GitLab CE/EE does not enforce token scope, so a user holding a read_api-scoped token can fetch a project's incoming email address and create work items. The flaw is limited to authenticated users under certain conditions.","category":"vendor","nicknames":[],"who_cares":["gitlab","self-hosted","ci-cd"],"confidence":0.7,"needs_auth":"yes","worst_case":"Read-scoped token holder fetches project email address and creates work items","analyst_note":"","how_to_check":"- Check the GitLab version with `gitlab-rake gitlab:env:info` or the Version line on the Admin Area page\n- Confirm whether the instance is in the affected range: 18.2 before `19.3.6`, 19.4 before `19.4.3`, or 19.5 before `19.5.1`","needs_analyst":false,"not_affected_if":["managed-hosting","auth-required"],"who_is_affected":"Self-hosted GitLab CE or EE instances on the affected version ranges with users who hold read_api-scoped tokens. Instances where all users are trusted, or that run GitLab.com managed hosting, are not the team's to patch.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000624,"input_tokens":3424,"output_tokens":563,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-12664':14A,17A '-2026':13A,16A '18.2':81C '19.3.6':83C '19.4':84C '19.4.3':86C '19.5':88C '19.5.1':90C 'address':54B,115C 'affect':77C 'allow':97C 'api':3A,44B,105C 'api-scop':43B,104C 'authent':64B,99C 'bypass':6A,120C 'cd':20B 'ce/ee':31B,76C 'certain':67B,93C 'ci':19B 'ci-cd':18B 'condit':68B,94C 'could':95C 'creat':9A,56B,117C 'cve':12A,15A 'due':125C 'email':53B,114C 'enforc':34B,129C 'fetch':48B 'field':28B,133C 'flaw':60B 'gitlab':1A,21B,30B,69C,75C 'graphql':27B,132C 'hold':40B 'host':24B 'incom':52B,113C 'insuffici':127C 'issu':73C 'item':11A,58B,119C 'limit':62B 'project':50B,111C 'read':2A,42B,103C 'remedi':71C 'restrict':124C 'retriev':109C 'scope':7A,36B,45B,106C,128C 'self':23B 'self-host':22B 'token':4A,35B,46B,107C,122C 'user':39B,65B,100C 'vendor':25B 'version':79C 'work':10A,57B,118C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted GitLab CE or EE instances on the affected version ranges with users who hold read_api-scoped tokens. Instances where all users are trusted, or that run GitLab.com managed hosting, are not the team's to patch.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T01:16:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss_by":"cve@gitlab.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-12664","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12664","severity":null,"published_at":"2026-10-22T01:16:59+00:00","modified_at":"2026-10-23T12:18:13+00:00","first_seen_at":"2026-10-23T21:57:30+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-12664","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-12664","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:52+00:00","fetched_at":"2026-10-24T07:15:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}