# GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014 (Swati Khandelwal/The Hacker News) — retained record

> Retained news record from news:digg-verification:thehackernews.com.

Canonical: https://highsignal.app/data/records/553ba8819d6ddfa9

[← sources](https://highsignal.app/data)


source: [news](https://highsignal.app/data/news) (news:digg-verification:thehackernews.com)  published 2026-10-25 03:32 ingested 2026-10-25 03:32

[OpenAI Inc.](https://highsignal.app/entities/OPENAI)[original source ↗](https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html)

## retained text



```
Techmeme permalink: https://www.techmeme.com/261021/p53#a261021p53

<a href="https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html"><img align="RIGHT" border="0" hspace="4" src="http://www.techmeme.com/261021/i53.jpg" vspace="4" /></a>
<p><a href="https://www.techmeme.com/261021/p53#a261021p53" title="Techmeme permalink"><img height="12" src="http://www.techmeme.com/img/pml.png" style="border: none; padding: 0; margin: 0;" width="11" /></a> Swati Khandelwal / <a href="https://thehackernews.com/">The Hacker News</a>:<br />
<span style="font-size: 1.3em;"><b><a href="https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html">GitLab patches a critical flaw that lets unauthenticated attackers run code on self-managed servers, affecting every release since 7.0 in 2014</a></b></span>&nbsp; &mdash;&nbsp; GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version &hellip; </p>
```



document fetched 2026-10-25 04:33