GitLab critical patches include one for a bug that allows code execution by unauthenticated users
Summary
GitLab has released updated versions of its Community Edition (CE) and Enterprise Edition (EE) to address twelve bugs and security issues. The most critical flaw, CVE-2026-110264, is an integer overflow that could allow unauthenticated users to execute arbitrary code. Another high severity flaw, CVE-2026-15723, involves improper authentication in OmniAuth-to-LDAP auto-linking, potentially allowing account takeover.
IFF Assessment
The article details critical vulnerabilities in GitLab that could lead to unauthenticated code execution and account takeover, posing a significant risk to defenders.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: September 14, 2026. Known ransomware use: Unknown.
Defender Context
Defenders should prioritize patching their GitLab instances immediately to mitigate the risk of unauthenticated code execution and account takeover. This highlights the ongoing need for vigilance and prompt patching of code repository and CI/CD systems, as they are frequent targets for attackers.