GitLab fixes serious flaw that would have allowed someone without an account to execute commands on its systems

GitLab has rolled out patches for a maximum-severity vulnerability affecting Community and Enterprise editions.

The issue allows unauthenticated remote code execution via CI/CD configurations.

Review the affected version ranges and apply the available updates.

---

The problem concerns certain older versions of the software, specifically versions 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2.

To address the issue, the company released the latest versions 19.2.8, 19.3.5 and 19.4.2, which correct the security gap.

Additional security fixes

In addition to the main problem, the company also fixed three other high-severity issues:

• A problem that could allow code execution in other users' browsers.
• An issue of incorrect permissions in process creation.
• A problem related to text control rules.

---

Read the original English article on Hacks.gr