Excessive Owner-level GitLab token scope across sensitive group

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•2

Detects a GitLab personal access token/response indicating Owner-level (access_level 50) group access combined with the broad 'api' scope on the sensitive gnutls/gnutls project -- the excessive standing-privilege pattern that turned one leaked token into a 55-project exposure.