GitLab fixes critical CVSS 10 bug risking server control

Software management platform GitLab released urgent security fixes after discovering a maximum-severity vulnerability in self-managed servers.

GitLab released emergency security patches on October 21 for a vulnerability rated 10.0 on the CVSS scale.

The flaw allows unauthenticated remote attackers to execute malicious code and take full control of affected servers.

The issue impacts self-managed GitLab installations, while GitLab.com and GitLab Dedicated are already secured.

No setting or workaround neutralizes the vulnerability; system administrators must apply the software patch immediately.

Read the full story