A vulnerability, which was classified as problematic, has been found in GitLab Enterprise Edition up to 18.6.5/18.7.3/18.8.3. Affected is an unknown function of the component GraphQL. Performing a manipulation results in allocation of resources.

This vulnerability is known as CVE-2026-1387. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.