Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Home / Tech / Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

July 27, 2026 dirk 0 Comments 3 tags

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.

Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap

Source: The Hacker News

Explore More

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed

American Airlines mechanic Azriel “Al” Blackman has died, aged 100

American Airlines mechanic Azriel “Al” Blackman has died, aged 100 Source: Hacker News