Topic

GitLab: news, advisories and analysis

3 articlesUpdated 22 Oct 2026

CyberSecureToday covers GitLab across 3 articles published between 12 Sep 2026 and 22 Oct 2026. The coverage includes 3 vulnerability advisories. 2 advisories are rated critical or high severity.

Stories on GitLab most often intersect with Remote Code Execution, DevSecOps and Onigmo, with Technology, Cloud & SaaS the most affected sector. The most recent story, “GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases”, was published 22 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaS
GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases
GitLab has released emergency security updates resolving CVE-2026-110264, a critical CVSS 10.0 integer overflow in the Onigmo regular expression compiler enabling unauthenticated RCE.
CST Editorial Desk22 Oct 202612 min read
ThreatsCloud & SaaSCritical
GitLab AI Gateway Prompt Execution Flaw Exposes Cloud Workspaces to Remote Code Execution (CVE-2026-90970)
A critical command injection flaw in GitLab AI Gateway allows remote attackers to break LLM agent sandboxes and execute code across enterprise cloud runners.
CST Editorial Desk1 Oct 202611 min read
ThreatsCloud & SaaSCritical
GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins
GitLab pushed emergency patches for CVE-2026-85706, an unauthenticated CVSS 10.0 path traversal flaw in the repository commits API that allows remote file extraction.
Priya Raman12 Sep 20266 min read

Latest coverage

GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases

GitLab AI Gateway Prompt Execution Flaw Exposes Cloud Workspaces to Remote Code Execution (CVE-2026-90970)

GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins