CVE-2025-6454: SSRF in GitLab CE/EE

An attacker exploiting this SSRF vulnerability could leverage an authenticated GitLab user account to initiate requests to internal services that are not directly accessible from the outside world. This could include accessing internal APIs, databases, or other sensitive systems. The potential impact ranges from information disclosure (reading internal configuration files or data) to potentially gaining further access to internal networks if the targeted internal service has vulnerabilities. The blast radius is limited to the internal network accessible from the GitLab server, but the consequences of successful exploitation could be significant, especially if internal systems contain sensitive data or are critical to business operations. This vulnerability highlights the importance of proper input validation and output sanitization to prevent SSRF attacks.

1. Reserved2025-06-20
2. Published2025-09-12
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-6454 is to upgrade GitLab to version 18.3.2 or later. If an immediate upgrade is not feasible, consider implementing temporary workarounds such as restricting outbound network access from the GitLab server using a Web Application Firewall (WAF) or proxy. Configure the WAF to block requests to internal IP addresses or specific internal services. Review and tighten access controls within the GitLab environment to limit the privileges of authenticated users. Monitor GitLab logs for suspicious outbound requests that may indicate exploitation attempts. After upgrading, confirm the fix by attempting to trigger the SSRF vulnerability with a crafted sequence and verifying that the request is blocked.