A critical CSRF vulnerability in GitLab CE/EE allows unauthenticated attackers to perform unauthorized actions on behalf of authenticated users, potentially leading to full account compromise.

This vulnerability, identified as CWE-352, involves insufficient CSRF protection within the GraphQL mutation interface. An unauthenticated attacker can trick an authenticated user into performing unintended actions by triggering unauthorized GraphQL mutations.

The CVSS score of 8.1 indicates a high severity rating, reflecting the potential for significant unauthorized activity within the application. Successful exploitation could allow attackers to modify code, alter repository settings, or perform administrative tasks on behalf of a victim, resulting in severe data integrity loss and potential unauthorized access to proprietary intellectual property.

Immediate Action: Upgrade all GitLab CE/EE instances to version 18.8.7, 18.9.3, or 18.10.1 immediately to apply the necessary security patches.

Proactive Monitoring: Review application access logs for suspicious GraphQL mutation requests or unusual user activity patterns that deviate from standard operational workflows.

Compensating Controls: Implement strict SameSite cookie policies and ensure that all GraphQL endpoints require valid CSRF tokens for state-changing operations to mitigate the risk until patching is completed.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the linked HackerOne security report.

Given the ability for an attacker to bypass authentication protections and perform unauthorized mutations, this vulnerability poses a significant risk to the integrity of the development environment. Organizations should prioritize the deployment of the provided patches across all affected GitLab instances to neutralize this threat.