
GitLab Patches Critical Remote Code Execution Flaw in CI/CD Regex Compiler
GitLab released urgent updates on October 12 to fix a maximum-severity vulnerability allowing unauthenticated attackers to run arbitrary code on servers.
Everything Threat Times has reported about CI/CD: 5 stories, newest first. Part of our Vulnerabilities coverage.

GitLab released urgent updates on October 12 to fix a maximum-severity vulnerability allowing unauthenticated attackers to run arbitrary code on servers.

CERT-EU urges immediate upgrades for self-managed GitLab instances after a critical remote code execution flaw was disclosed.

GitLab issued urgent updates on October 8, 2026, to address multiple vulnerabilities, including a remote code execution flaw in CI/CD regular expressions.

Threat actors used stolen maintainer credentials to inject malicious workflows into hundreds of repositories, stealing secrets and cloud keys.

A security researcher reported that GitHub Actions workflows can expose sensitive secrets if the build cache contains output from the Miri interpreter.