Critical GitLab Vulnerability Requires Immediate Update

A critical vulnerability with the highest danger rating has been discovered in GitLab. The flaw existed in the code since 2024 and affects all versions from the last 12 years.

The vulnerability allows attackers to remotely execute commands on the server without authentication or password entry. Developers have already released emergency patches, but they are available only for the latest platform versions.

The situation is exacerbated by similar holes being found in many popular technologies: PHP, eMudhra, and Node.js. Malicious code was detected in the LiteLLM library, indicating the scale of the security problem.

Experts recommend urgently checking your GitLab versions and updating if possible. Ignoring the update leaves systems vulnerable to unauthorized access.