Incident · Thursday 22 October 2026 · story 4
GitLab fixes unauthenticated code execution flaw in self-managed releases
The Hacker News reports GitLab fixed CVE-2026-110264 on October 21 after saying it could let an unauthenticated user run arbitrary code on a self-managed server. The flaw affects releases back to 7.0, while GitLab said GitLab.com already runs the fixed version.
Why it matters. Teams running self-managed GitLab should patch quickly, because the only certain protection is the fixed version.
Read the original at thehackernews.com