#gitlab
8 stories taggedgitlab.
GitLab Patches a Critical Hole That Reaches Back to 2014
A second emergency fix in nine days covers every self-managed install since version 7.0, and the first round missed older branches.
GitLab Rushes Out Patch for Flaw That Let Strangers Run Code on the Server
The October 12 release fixes a maximum-severity bug in Community and Enterprise Edition. Self-managed installs need to update now.
GitLab patches a near-perfect-score AI Gateway bug that lets logged-in users run commands on the server
CVE-2026-90970 scores 9.9 out of 10 and lets any authenticated user with Duo Agent Platform access escape a prompt template and execute code. Only self-hosted gateways need the fix.
GitLab's Per-User Issue Email Is a Password in Disguise
The private address you use to file issues by email can also push code and start pipelines as you. Treat it like a credential, because it is one.
GitLab Rushes Out Fixes for Two Critical Server Flaws, One Lets Strangers Read Private Files
A path traversal bug and a second critical flaw in GitLab's enterprise product prompted an urgent patch call for self-hosted installations.
This Week in AI Security: Rogue Packages, PLC Hacks by Chatbot, and Leaky Stripe Keys
A weekly roundup of the AI and infrastructure security stories that actually matter, translated into plain English.
Critical GitLab Flaw Lets Attackers Wipe Public Projects Without Logging In
GitLab has patched a flaw rated 9.4 out of 10 that let unauthenticated attackers alter or delete public projects and user data through the platform's GraphQL interface.
GitLab Flaw Lets Any Logged-In User Run Commands on Self-Hosted Servers
Researcher Yuhang Wu published working exploit code against GitLab 18.11.3 that hijacks the server through two booby-trapped notebooks and a diff request.