CVE Intelligence

Gerrit vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Gerrit products: 1 record(s), with severity, exploitation and fixes.

Gerrit 1

Exploited only (KEV) →

CVE-2026-2725 Medium · 5.3 CWE-863 May 13, 2026
Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together"
Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review and forcefully submit code to restricted branches via a crafted submission matching the "topic" tag of an unapproved change.