Exploitation has not occurred yet, but owners of self-managed GitLab CE & EE instances need to act now – before it's too late ...

GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers.

GitLab fixed CVE-2026-97229 (CVSS 10.0), a CI/CD flaw that could allow unauthenticated code execution under certain ...

GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary ...