CompaniesGitLabMonthly reportsFebruary 2026
GitLab in February 2026: incidents, uptime and changes
11incidents posted
7labelled major or critical
74.65%free of major/critical
69.13%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 7.1 days, incident time 8.6 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 6 · Minor 4
Major and critical incidents 7
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Degraded performance for pipelines on gitlab.com | Critical | 30 h | resolved | 02-03 | |
| GitLab Duo is unavailable on VSC and Web UI | Major | 4.7 h | resolved | 02-03 | |
| Branch creation is failing in Fix Pipeline and Duo Developer Flows | Major | 2.1 h | resolved | 02-11 | |
| 500 Errors due to failures in Gitaly service nodes | Major | 19 h | resolved | 02-17 | |
| 500 Errors due to failures in Gitaly service nodes | Major | 5 d | resolved | 02-18 | |
| Apdex SLO violation for inference_anthropic in asia-northeast1 | Major | 2.2 h | resolved | 02-20 | |
| 403 errors impacting CI/CD pipelines | Major | 1.6 h | resolved | 02-25 |
Other incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Inline comments on MRs cannot be hidden or expanded | Minor | 11 h | resolved | 02-02 | |
| High Error Rate for External Agent Operations | Minor | 30 min | resolved | 02-02 | |
| Degraded Duo Agent Platform Performance | Minor | 1.2 h | resolved | 02-21 | |
| Delays in background processing | Minor | 26 h | resolved | 02-24 |
CVEs published
- CVE-2026-1751 Missing Authorization in GitLab (CVSS 3.1)
- CVE-2026-1868 Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway (CVSS 9.9)
- CVE-2026-1458 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-1456 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-1387 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-1282 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab (CVSS 3.5)
- CVE-2026-1094 Improper Validation of Unsafe Equivalence in Input in GitLab (CVSS 4.6)
- CVE-2026-1080 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-0958 Interpretation Conflict in GitLab (CVSS 7.5)
- CVE-2026-0595 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3)
- CVE-2025-14592 Missing Authorization in GitLab (CVSS 3.7)
- CVE-2025-14594 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 3.5)
- CVE-2025-14560 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3)
- CVE-2025-12575 Server-Side Request Forgery (SSRF) in GitLab (CVSS 5.4)
- CVE-2025-12073 Server-Side Request Forgery (SSRF) in GitLab (CVSS 4.3)
- CVE-2025-8099 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-7659 Origin Validation Error in GitLab (CVSS 8.0)
- CVE-2025-14103 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2025-3525 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-2845 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-1725 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3)
- CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 4.3)
- CVE-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab (CVSS 7.5)
- CVE-2026-0752 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0)
- CVE-2025-14511 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
Cite this
GitLab posted 11 status incidents in February 2026 (7 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in February 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/02