Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Home / Tech / Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

July 27, 2026 dirk 0 Comments 3 tags

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.

Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap

Source: The Hacker News

Explore More

OpenAI’s Only Ethicist Reportedly Left Last Month

OpenAI’s Only Ethicist Reportedly Left Last Month Source: Hacker News

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line

There’s a new “Google Jail” for independent wikis

There’s a new “Google Jail” for independent wikis Source: Hacker News