{"vulnerability": "CVE-2026-7767", "sightings": [{"uuid": "cb532291-54a6-481b-b7f4-1a32a238e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117431156287892048", "content": "CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-7767https://gitlab.com/gitlab-org/gitlab/-/work_items/598965https://hackerone.com/reports/3597095https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_7767#bot", "creation_timestamp": "2026-10-13T02:07:23.656129Z"}, {"uuid": "ada58678-09b4-4199-b1a9-44948c07b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "content": "", "creation_timestamp": "2026-10-12T18:00:00.000000Z"}]}