2026-016: Critical Vulnerability in GitLab CE and EE

Reported by CERT-EU

Summary by Cyber Security News12 Oct 2026, 14:57 CET

About this summary. This is a short excerpt from the description that CERT-EU published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cert.europa.eu/publications/security-advisories/2026-016/

On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.

Read the full article at CERT-EU →

Source attribution: headline and facts are from CERT-EU (cert.europa.eu). Summary method: excerpt of the source description. See our source attribution policy.