GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
