← Back to list

Non-group members can be added to projects even though the “Users cannot be added to projects in…

https://gitlab.com/gitlab-org/gitlab/-/work_items/551267

Rohmad Hidayah · 2026-06-09 12:31 · 0 claps · 0.1 min read
#bug-bounty-writeup #gitlab #business-logic-flaw
Open on Medium ↗
Wiki topics: ☁️ · DevOps & Cloud 🔓 · Open Source ⚖️ · Law & Justice

Non-group members can be added to projects even though the “Users cannot be added to projects in this group” feature is active in the victim group

https://gitlab.com/gitlab-org/gitlab/-/work_items/551267


메타데이터
post_id
deeb8ff41fd4
slug
non-group-members-can-be-added-to-projects-even-though-the-users-cannot-be-added-to-projects-in-deeb8ff41fd4
url
https://medium.com/@r0hm4dh/non-group-members-can-be-added-to-projects-even-though-the-users-cannot-be-added-to-projects-in-deeb8ff41fd4
canonical_url
https://medium.com/@r0hm4dh/non-group-members-can-be-added-to-projects-even-though-the-users-cannot-be-added-to-projects-in-deeb8ff41fd4
author_url
https://medium.com/@r0hm4dh
status
ok
fetched_at
2026-06-17 12:55:42