A vulnerability identified as problematic has been detected in GitLab Community Edition and Enterprise Edition up to 18.6.5/18.7.3/18.8.3. This issue affects some unknown processing of the component API. Performing a manipulation results in authorization bypass.

This vulnerability is cataloged as CVE-2025-14594. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.