CVE-2025-6171 | GitLab Community Edition/Enterprise Edition up to 18.3.5/18.4.3/18.5.1 Packages API Endpoint authorization (Patch 549730)

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 18.3.5/18.4.3/18.5.1. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Packages API Endpoint. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2025-6171. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.