A vulnerability categorized as problematic has been discovered in GitLab Community Edition and Enterprise Edition up to 18.6.3/18.7.1/18.8.1. This affects an unknown part of the component API Endpoint. Executing a manipulation can lead to incorrect authorization.
This vulnerability is tracked as CVE-2025-13928. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.
