Critical · 1 source · latest 1d

Over 1,000 GitLab servers remain unpatched against an actively exploited RCE flaw

CRITICAL · VULNERABILITYredteam/daily · 1 source

Severity: Critical
Sources: 1

What happened

More than 1,000 GitLab servers that can be reached from the internet have not yet fixed a serious flaw. Attackers are actively using it to run their own commands on those servers.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check whether any of your GitLab instances are reachable from the internet.
Confirm your GitLab version against the vendor advisory and apply the patch for the maximum-severity flaw.

Written by AI from the sources, checked against them

Read the full story at the source

Full story timeline · 1 update

Mon 2 November12:47Over 1,000 GitLab servers vulnerable to ongoing RCE attacksBleepingComputer

Who reported · 1 outlet

BleepingComputer