CVE-2026-14814

{
  "etk_id": "ETK-2026-1454",
  "cve_id": "CVE-2026-14814",
  "display_id": "CVE-2026-14814",
  "ghsa_id": "GHSA-49c6-8ph4-9vr9",
  "euvd_id": "EUVD-2026-98224",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Raw repository-file cache poisoning in GitLab",
  "summary": "GitLab CE/EE versions in the affected release ranges can allow an authenticated user to poison cached responses for raw repository files because repository references are insufficiently validated. Where a targeted CI/CD pipeline consumes such a response, it may run attacker-controlled content and could expose protected environment variables.",
  "mitigation": "Upgrade GitLab to 19.2.8, 19.3.5, or 19.4.2, as appropriate for the maintained release line. Until upgraded, restrict untrusted users' ability to influence repositories or pipeline inputs that use raw repository files.",
  "vendor": "GitLab",
  "product": "GitLab",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 19.2.8",
        ">= 19.3, < 19.3.5",
        ">= 19.4, < 19.4.2"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "19.2.8",
        "19.3.5",
        "19.4.2"
      ],
      "package_name": "GitLab",
      "purl": null
    }
  ],
  "cwes": [
    625
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
  "epss_score": 0.0025,
  "epss_percentile": 0.1512,
  "epss_asof": "2026-10-21",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 63.7371767,
  "t0_at": "2026-10-13T01:08:26.181000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-14T11:05:18.759925+00:00",
      "days": 1.414497441261574,
      "is_lower_bound": false,
      "measured_at": "2026-10-13T01:08:26.181000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-13T01:08:26.181000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-13T01:08:26.181000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14814"
    }
  }
}