Critical GitLab security flaw Allows Unauthenticated Attackers to Execute Remote Code

What happened

GitLab has released emergency security updates to address a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code on affected servers. On October 12, 2026, the company released versions 19.4.2, […] The post Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Read Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code By Divya October 13, 2026 Share Facebook Twitter Pinterest WhatsApp GitLab has released emergency security updates to address a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code on affected servers. On October 12, 2026, the company released versions 19.4.2, 19.3.5, and 19.2.8 and strongly urged self-managed customers to upgrade immediately.

GitLab.com is already running the patched version, and GitLab Dedicated customers do not need to take any action. This vulnerability, tracked as CVE-2026-97229 (the public catalogue number for a specific software flaw), has been assigned the highest CVSS score of 10.0 and impacts both GitLab Community Edition and Enterprise Edition.

CVE/vulnerability Cyber Security News Vulnerabilities 2 min. The release addresses 24 vulnerabilities, including remote code execution (running programs on a machine from somewhere else) , cross-site scripting, pipeline authorization bypasses, information disclosure, and AI prompt injection.

Key facts

• GitLab has — released: emergency security updates to address a critical vulnerability that could allow unauthenticated attackers to execute arbitrary code on affected servers
• On October 12, 2026, the company — released: versions 19.4.2, […] The post Critical GitLab Vulnerability Allows Unauthenticated Attackers to Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform
• On October 12, 2026, the company — released: versions 19.4.2, 19.3.5, and 19.2.8 and strongly urged self-managed customers to upgrade immediately