GitLab releases patches for CVSS 10.0 RCE flaw affecting versions 7.0‑2026

GitLab issued security patches on October 21 for a maximum‑severity regular‑expression compiler vulnerability that enables unauthenticated remote code execution. The flaw impacts every self‑managed GitLab release back to version 7.0, originally released in 2014. Earlier patches on October 12 covered only versions 19.2 and later, prompting the new comprehensive fix.

Why it matters: Unpatched GitLab servers can be fully compromised, risking code and data across countless development pipelines.

More in Security

Security9h ago5 sources

Chinese state-linked hackers used AI agents to breach ConnectWise, affecting over 2,200 tenants

TechCrunch + 4 more

Security16h ago3 sources

Operation Serengeti III disrupts 10,909 cybercrime networks, arrests 1,462 across Africa