CVE-2026-3857 GraphQL CSRF — Arbitrary Mutation Execution

CVE-2026-3857 is a high-severity vulnerability. AttackerView checks GitLab sites for it with a live exploit check.

Is my site vulnerable to CVE-2026-3857?

Detects GitLab instances where the GraphQL API endpoint lacks CSRF token validation on mutation operations. An unauthenticated attacker can execute arbitrary GraphQL mutations on behalf of any logged-in user who visits a malicious page — creating personal access tokens, modifying repositories, or changing CI/CD settings. Versions 17.10.0–18.8.6, 18.9.0–18.9.2, and 18.10.0 are affected.