GitLab released emergency updates on October 21, 2026, to fix a CVSS 10.0 integer overflow vulnerability that allows unauthenticated remote code execution.
Security firm Calif detailed how a legacy integer overflow in OpenBSD’s shared memory handling allowed local privilege escalation to root, bypassing modern kernel protections.