GitLab CVE-2026-19478: Critical GraphQL Flaw Can Modify or Delete Public Data
GitLab CVE-2026-19478 is a critical GraphQL code-injection vulnerability affecting self-managed GitLab CE/EE. Under certain conditions, unauthenticated attackers could modify or delete public projects and user data.