Critical Vulnerability in GitLab CE and EE
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.
Read at CERT-EU Security Advisories
- Vendor
- GitLab
- Product
- GitLab
- Fix
- available
- Exposure class
- Developer platform
Why it ranks 19 (Routine)
- Product class: developer platform
- Fix available
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CERT-EU Security Advisories (cert.europa.eu)