Tag: GitLab
-
A maximum-severity GitLab code execution vulnerability has prompted an urgent warning for administrators running self-managed installations. The flaw could allow remote attackers to execute arbitrary code without signing in. GitLab disclosed the issue on October 12 and released patches for affected Community Edition (CE) and Enterprise Edition (EE) versions. Meanwhile, GitLab.com already runs the patched…
-
A critical GitLab AI Gateway flaw could allow authenticated attackers to execute commands on vulnerable systems. GitLab has released security updates and urged customers running self-hosted installations to apply them immediately. However, customers using GitLab’s hosted AI Gateway do not need to take action. The company says it has already secured that service. Self-Hosted Customers…
-
Developers who publish a private GitLab project email address to collect bug reports may also give attackers a way to create work items in their name. Researchers at Aikido found live addresses in public project documentation and warned that the same credentials could enable merge requests. Private Addresses Contain Long-Lived Tokens GitLab lets users create…
-
Attackers are exploiting a critical GitLab vulnerability to steal sensitive data from unpatched servers. Researchers have found 12 public exploit repositories, while around 13,700 exposed systems may remain vulnerable. Attackers Exploit Critical GitLab Flaw The vulnerability, tracked as CVE-2026-85706, affects GitLab Community Edition and Enterprise Edition. It carries the maximum severity rating. Censys discovered at…
-
The GitLab secrets exposure revealed a massive collection of leaked credentials inside public repositories. A large-scale scan uncovered thousands of live secrets tied to real infrastructure, cloud platforms, and internal systems. The findings raised serious concerns about secret management and highlighted persistent security failures across software development teams. What the Investigation Discovered A security researcher…