CVE-2025-14511
Published: 25 February 2026
Summary
CVE-2025-14511 is a high-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Gitlab Gitlab. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 15.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense at a Glance
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct mapping to application exploitation causing endpoint DoS via resource exhaustion on a public-facing service.
NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to…
more
the container registry event endpoint under certain conditions.
Deeper analysisAI
CVE-2025-14511 is a denial-of-service vulnerability (CWE-1284) affecting GitLab Community Edition (CE) and Enterprise Edition (EE) in all versions from 12.2 prior to 18.7.5, 18.8 prior to 18.8.5, and 18.9 prior to 18.9.1. The flaw exists in the container registry event endpoint, where an unauthenticated user could send specially crafted files under certain conditions to trigger resource exhaustion. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
An unauthenticated attacker with network access to a vulnerable GitLab instance can exploit this by submitting malicious files to the container registry event endpoint. Exploitation requires low complexity and no user interaction or privileges, resulting in denial of service through high availability impact, such as disrupting registry operations without compromising confidentiality or integrity.
GitLab has remediated the issue via patches in versions 18.7.5, 18.8.5, and 18.9.1, as detailed in the February 25, 2026 patch release notes for 18.9.1. Administrators should upgrade affected instances immediately. Further technical details are documented in GitLab issue #583717 and the corresponding HackerOne report #3452200.
Details
- CWE(s)