← CVE Intelligence

CVE-2025-8279

Missing Authentication for Critical Function in GitLab Language Server PUBLISHED

Description (CNA)

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

Affected (CNA)

Vendor / productVersions
GitLab / GitLab Language Serveraffected 7.6.0 before 7.30.0

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.