CyberSecurity News

Critical GitLab Flaw Exploited Shortly After Disclosure

SecurityWeek

· August 20, 2026

AI summary

A critical vulnerability in GitLab, identified as CVE-2026-19478, has been exploited shortly after its disclosure. This flaw can be exploited without authentication, allowing attackers to modify or delete public projects and user data.

Vulnerabilities mentioned

CVE-2026-19478

CRITICAL

CVSS 9.4

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.

Read the full article at SecurityWeekwww.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.