The vulnerability stems from an improper authorization check in GitLab’s GraphQL API, allowing unauthenticated users to retrieve CI/CD job trace contents that may contain sensitive variable values. An attacker could exploit this flaw to read secrets such as tokens or passwords stored in job logs, leading to a confidentiality breach. The weakness is documented as an instance of Unauthorized Access (CWE-862).

GitLab Community Edition and Enterprise Edition versions from 15.11 up to but not including 19.2.7, 19.3.3, and 19.4.1 expose the vulnerable GraphQL endpoint and are affected.

The CVSS score of 3.7 indicates medium severity, while the EPSS score of less than 1% suggests a low likelihood of immediate exploitation. The vulnerability is not listed in the CISA KEV catalog, meaning it is not a known exploited vulnerability. Successful exploitation requires only the ability to send GraphQL queries to the GitLab instance, a capability available to anyone who can reach the service over HTTP/HTTPS, making the attack path straightforward for remote attackers.