CVE-2025-8279

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@gitlab.com

Published

2025-07-28

Last modified

2025-07-28

Weaknesses

CWE-306

Affected products

• Gitlab-language-server (Gitlab)
• Language Server (Gitlab)

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/538205