CVE-2025-1754 | GitLab Community Edition/Enterprise Edition up to 17.11.4/18.0.2/18.1.0 API Request missing authentication (EUVD-2025-19168 / Nessus ID 240621)
A vulnerability has been found in GitLab Community Edition and Enterprise Edition up to 17.11.4/18.0.2/18.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component API Request Handler. The manipulation leads to missing authentication.
This vulnerability is known as CVE-2025-1754. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.