CVE-2026-92874: 
GitLab 脆弱性の分析と軽減

CVE-2026-92874 is an improper authorization vulnerability in GitLab CE/EE that allows authenticated users with MCP-scoped tokens to perform actions beyond the intended scope of those tokens. It affects all GitLab CE/EE versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1. The vulnerability was published on September 24, 2026, and GitLab has released patches for all affected version branches. It carries a CVSS v3.1 base score of 5.4 (Medium) (GitHub Advisory, GitLab Patch Release).

The root cause is classified as CWE-863 (Incorrect Authorization): the product performs an authorization check when an actor attempts to access a resource or perform an action, but does not correctly perform that check. Specifically, GitLab's handling of MCP-scoped tokens fails to enforce the intended scope boundaries under certain conditions, allowing the token holder to invoke actions outside the token's designated permissions. The attack vector is network-accessible, requires low privileges (a valid authenticated session with an MCP-scoped token), and no user interaction is needed. No public proof-of-concept code has been identified (GitHub Advisory, GitLab Patch Release).

Successful exploitation allows an authenticated attacker holding an MCP-scoped token to perform unauthorized actions on GitLab resources beyond what the token was intended to permit, resulting in limited confidentiality and integrity impacts. This could include reading or modifying data in projects or namespaces that the token should not have access to. Availability is not impacted, and the scope of the vulnerability is unchanged, limiting blast radius to the resources accessible within the GitLab instance (GitHub Advisory).

There is no evidence of active in-the-wild exploitation or a publicly available proof-of-concept at this time. The EPSS score is 0.0, indicating a very low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation requires a valid authenticated account with an MCP-scoped token, which limits the attacker pool to existing users or compromised accounts (GitHub Advisory, GitLab Patch Release).

GitLab has released patched versions addressing this vulnerability: upgrade to 19.4.1, 19.3.3, or 19.2.7 depending on your current version branch. All versions from 18.3 through 19.4.0 are affected and should be updated immediately. As a supplementary measure, administrators should audit actions performed by users holding MCP-scoped tokens to identify any potential unauthorized activity prior to patching (GitLab Patch Release, GitHub Advisory).