Tag: gitlab
20 articles
Ruby Fixes Regex Engine Bugs Behind GitLab RCE Flaws
GitLab users, beware: a critical vulnerability in Ruby's regex engine, patched in versions 4.0.9, 3.4.12, and 3.3.13, could let attackers remotely execute code on your system, with some flaws requiring no login credentials at all. The CVE-2026-110264 bug alone affects every GitLab release from 7.0 onward.
GitLab Patches Max-Severity Flaw Exploited in Code Execution Attacks
GitLab has patched a critical flaw that allowed hackers to execute malicious code on its servers, thanks to an integer overflow vulnerability in its Regular Expression Compiler that could be triggered by a specially crafted regular expression. This max-severity vulnerability, tracked as CVE-2026-110264, could be exploited by unauthenticated users, posing a huge risk to GitLab users.
GitLab Flaw Exposes Self-Managed Servers to Unauthenticated Code Execution
A critical GitLab flaw, rated 10.0 on the CVSS scale, leaves self-managed servers vulnerable to unauthenticated code execution, affecting every release since 2014. This severe vulnerability can allow attackers to run arbitrary code under certain conditions, making swift patching a top priority.
GitLab Fixes Code Execution Flaw with Maximum Severity Rating
GitLab has patched a critical vulnerability that could have let hackers run malicious code on its servers, thanks to a flaw in its CI/CD configuration that wasn't properly validating regular expressions. This maximum-severity bug, tracked as CVE-2026-97229, could be exploited by unauthenticated users, making it a major security risk.
GitLab Patches Code Execution Flaw in CI/CD Compiler
GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.
GitLab Fixes 9.9 Flaw in AI Gateway That Enables Command Execution
GitLab has patched a critical 9.9-rated flaw in its AI Gateway that allowed attackers to execute commands, giving logged-in users with access to the Duo Agent Platform the potential to wreak havoc. This fix comes courtesy of HackerOne reporter invisiblemeerkat, who identified the vulnerability.
GitLab patches RCE flaw in AI Gateway service
GitLab has patched a critical remote-code-execution flaw in its AI Gateway service, known as CVE-2026-90970, which could have allowed attackers to run arbitrary commands on vulnerable instances. Even users with basic privileges could exploit this vulnerability, making it essential to apply the patch ASAP.
GitLab Exposes Private Email Addresses to Code Push Risks
GitLab's helpful hack for easy bug reporting has turned into a security risk, with researchers discovering that publicly exposed email addresses can be easily manipulated to create unauthorized merge requests. Simply tweaking a few characters in the address can open up a project's inner workings to potential code push risks.
GitLab Exposes Email Token Flaw, Enabling Unauthorized Code Pushes
GitLab has a security flaw that exposes a private email token, allowing unauthorized users to push code changes to projects - essentially giving anyone carte blanche to act on your behalf. This token, tied to your account, doesn't expire and grants access to all projects you have permission to open.
GitLab Flaw Exploited After Patch Release
A newly patched GitLab flaw, rated a perfect 10.0 in severity, is being exploited by attackers, who can use it to read arbitrary files from vulnerable servers without needing to log in. This path traversal bug in GitLab's repository commits API is especially concerning since it often stores sensitive source code, configuration files, and credentials.
GitLab Flaw Exploited in Wild, Prompting Urgent Patch Push
A critical GitLab bug, CVE-2026-85706, is under active exploitation, putting sensitive files at risk of exposure due to a path traversal vulnerability that allows unauthenticated users to access arbitrary files. GitLab has urgently pushed a patch to fix the flaw, affecting versions CE/EE 18.7 to 19.3.2.
Hackers Exploit GitLab Flaw in Active Attacks
Hackers are actively exploiting a critical GitLab flaw, CVE-2026-85706, that allows them to read sensitive information like credentials and secrets with just a single HTTP request. This vulnerability enables attackers to access arbitrary files, potentially exposing long-lived secrets and confidential data.
GitLab Flaw Draws Widespread Probes Ahead of Patch
GitLab has rushed out emergency patches for two severe flaws in its platform, warning users to upgrade ASAP to avoid potential exploitation. A particularly critical defect, CVE-2026-85706, has been assigned a maximum CVSS score of 10.0, sparking widespread concern.
GitLab Discloses Path Traversal Flaw Exploited in Wild
GitLab has revealed a critical path traversal flaw, CVE-2026-85706, that allows unauthenticated users to access sensitive files on its servers, and security researchers have already spotted attackers probing for vulnerabilities in the wild. This maximum-severity bug, scoring a CVSS 10.0, enables hackers to read arbitrary files, including log files and configuration files.
GitLab Warns Users to Patch Path Traversal Flaw
GitLab is urging users to upgrade immediately to patch a critical path traversal flaw, CVE-2026-85706, that could expose sensitive files to unauthenticated attackers. This maximum-severity vulnerability requires prompt action to protect self-managed GitLab installations.
GitLab Flaw Exploited in Wild Days After Disclosure
In a chilling demonstration of the new reality in vulnerability exploitation, attackers began exploiting a newly disclosed GitLab flaw within minutes of its public disclosure, leaving little time for patching. This rapid reproduction and exploitation is a stark reminder that waiting for the next patch cycle may no longer be a viable defense strategy.
GitLab Patches Flaw That Exposes Public Projects to Unauthenticated Deletion
GitLab has urgently patched a critical vulnerability that left public projects open to deletion by anyone, with no login required - a flaw that scored a near-perfect 9.4 on the severity scale. The fix addresses a GraphQL weakness that could let unauthenticated users remotely modify or delete public projects and user data.
TeamPCP Linked to Years-Old Cryptojacking Operation
New research reveals that TeamPCP, a notorious cryptojacking group, has been secretly operating for years, with evidence tracing back to 2020 and a recent connection to a massive supply-chain compromise in March 2026. Their operation, linked to the TA-NATALSTATUS activity, involved a sophisticated deployment framework and shared infrastructure.
GitLab RCE Exploit Published, Targets Unpatched Servers
A security researcher has just published a working exploit that can execute commands on unpatched GitLab servers, putting sensitive data and systems at risk. If your GitLab server is unpatched, it's crucial to update now to prevent potential code execution and data breaches.
North Korean Hackers Exploit Coding Lures to Steal Crypto Credentials
In a sneaky move, North Korean hackers sent over 250 emails with innocent-looking coding tasks to nearly 100 US-based organizations, tricking them into handing over cryptocurrency credentials. The clever phishing scam, tracked as UNK_DeadDrop, targeted tech, education, and finance firms, with a special focus on cryptocurrency companies.