2026-016: Critical Vulnerability in GitLab CE and EE

CERT-EU Version 1 original current

Imported from official source

On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.

This version

Version
1 of 1
Recorded
October 12, 2026 13:00
Change
Initial
Content hash
13369924a5148d43c327c5cc9c0c8c39
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.