CompaniesGitLabMonthly reportsAugust 2026
GitLab in August 2026: incidents, uptime and changes
13incidents posted
7labelled major or critical
95.64%free of major/critical
89.90%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 32 h 23 min, incident time 3.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 3 · Major 4 · Minor 6
Major and critical incidents 7
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| 500 errors when fetching commits on GitLab.com | Critical | 3.6 h | resolved | 08-18 | |
| 403 errors across GitLab.com | Critical | 29 min | resolved | 08-21 | |
| HTTP 500 errors affecting GitLab.com | Critical | 3.8 h | resolved | 08-27 | |
| Project and Group Deletions Delayed | Major | 6.5 h | resolved | 08-17 | |
| Investigating GitLab Agent for Kubernetes (KAS) Deployment Failures | Major | 1.4 h | resolved | 08-24 | |
| General slowness and intermittent 502s on Gitlab.com | Major | 14 h | resolved | 08-25 | |
| Investigating GitLab.com Access Issues | Major | 2.4 h | resolved | 08-27 |
Other incidents 6
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Problems related to git operations | Minor | 9.6 h | resolved | 08-03 | |
| Issue with Duo Code Review Flows | Minor | 4.0 h | resolved | 08-04 | |
| Issues with webhook deliveries | Minor | 23 h | resolved | 08-04 | |
| Issues with pipelines | Minor | 1.6 h | resolved | 08-05 | |
| Issue with background jobs | Minor | 2.4 h | resolved | 08-06 | |
| Elevated queue times on saas-linux-medium-arm64 runner | Minor | 3.8 h | resolved | 08-13 |
CVEs published
- CVE-2026-18244 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-16627 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.7)
- CVE-2026-15423 Incorrect Authorization in GitLab (CVSS 8.5)
- CVE-2026-8667 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-7427 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3)
- CVE-2026-19228 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 8.5)
- CVE-2026-18433 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-16494 Missing Authorization in GitLab (CVSS 7.1)
- CVE-2026-15216 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-15217 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-6821 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-4879 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2025-9486 Incorrect Privilege Assignment in GitLab (CVSS 3.3)
- CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 9.4)
- CVE-2026-19650 Cross-Site Request Forgery (CSRF) in GitLab (CVSS 7.1)
- CVE-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (CVSS 8.5)
- CVE-2026-77801 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab (CVSS 7.3)
- CVE-2026-15387 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab (CVSS 4.3)
- CVE-2026-7487 Access Control Check Implemented After Asset is Accessed in GitLab (CVSS 3.5)
- CVE-2026-3035 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 5.5)
- CVE-2025-10903 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab (CVSS 6.5)
- CVE-2026-19889 Server-Side Request Forgery (SSRF) in GitLab AI Gateway (CVSS 8.2)
- CVE-2026-75871 Server-Side Request Forgery (SSRF) in GitLab AI Gateway (CVSS 8.2)
- CVE-2026-4398 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 5.4)
Cite this
GitLab posted 13 status incidents in August 2026 (7 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in August 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/08