GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has patched a severe security flaw in its Community and Enterprise Edition software that could allow arbitrary code execution. The vulnerability could be exploited by an unauthenticated user who crafts a special regular expression in a CI/CD pipeline. This would give the user the ability to run code on the GitLab server. The issue has been remediated by GitLab, which has released patches to address the flaw. The vulnerability is considered to be of maximum severity.