Back to all news
Security

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

The Hacker News·October 13, 2026·1 min read
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab released patches for a maximum-severity flaw in Community Edition and Enterprise Edition that could allow unauthenticated users to execute arbitrary code on the server. The vulnerability, rated CVSS 10.0, is triggered via a specially crafted regular expression in a CI/CD pipeline. GitLab urged all installations to upgrade immediately to prevent exploitation.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store