GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014 (Swati Khandelwal/The Hacker News)

retained text

Techmeme permalink: https://www.techmeme.com/261021/p53#a261021p53

<a href="https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html"><img align="RIGHT" border="0" hspace="4" src="http://www.techmeme.com/261021/i53.jpg" vspace="4" /></a>
<p><a href="https://www.techmeme.com/261021/p53#a261021p53" title="Techmeme permalink"><img height="12" src="http://www.techmeme.com/img/pml.png" style="border: none; padding: 0; margin: 0;" width="11" /></a> Swati Khandelwal / <a href="https://thehackernews.com/">The Hacker News</a>:<br />
<span style="font-size: 1.3em;"><b><a href="https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html">GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014</a></b></span>&nbsp; &mdash;&nbsp; GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version &hellip; </p>

document fetched 2026-10-25 04:33