The vulnerability involves an incorrect resolution of references within GitLab's CI system. Under specific circumstances, an authenticated user may retrieve CI data from a ref type other than expected. This flaw may allow the user to read pipeline artifacts or job logs associated with other branches or tags, compromising confidentiality of project CI data. The weakness matches CWE‑706, which concerns uncontrolled data flow leading to unintended disclosure between components.

All GitLab CE/EE releases from version 12.7 through 18.10.6, 18.11 through 18.11.3, and 19.0 through 19.0.0 are affected. The issue is fixed in GitLab 18.10.7, 18.11.4, 19.0.1, and all later releases.

The CVSS score of 4.3 indicates moderate severity, while no EPSS score is currently available, making it difficult to gauge exploitation probability. The vulnerability is not included in the CISA KEV catalog, suggesting limited exploitation activity so far. Exploit requires an authenticated session and occurs when the attacker requests CI data for an unintended ref type. Thus the threat is confined to users with legitimate access to the project, but the attack could expose unintended CI artifacts to those users.