Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Home / Tech / Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

July 27, 2026 dirk 0 Comments 3 tags

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.

Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap

Source: The Hacker News

Explore More

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval A flaw in DeepSeek Harness, DeepSeek’s open-source tool for running AI coding agents on a developer’s machine,

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to

1,741 “informed” consents with one click? GDPR complaint filed

1,741 “informed” consents with one click? GDPR complaint filed Source: Hacker News