GitLab Issues Emergency Patches for Multiple Security Vulnerabilities
Article Content
- •GitLab released patches for seven critical vulnerabilities affecting CE and EE.
- •Flaws include Duo AI access control issues and a Wiki DoS vulnerability.
- •Self-managed installations are urged to upgrade immediately to prevent exploitation.
GitLab has released urgent security patches for versions 19.0.1, 18.11.4, and 18.10.7 to address seven vulnerabilities affecting both Community Edition (CE) and Enterprise Edition (EE). The flaws include access control issues in Duo AI workflows, a denial-of-service (DoS) vulnerability in the Wiki feature, and various authorization bugs across multiple endpoints. Self-managed installations are advised to upgrade immediately to mitigate potential exploitation. The vulnerabilities could allow unauthorized access and service disruptions, impacting a wide range of users relying on GitLab for development operations. GitLab's advisory emphasizes the critical nature of these updates for maintaining security integrity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…