{ads}

›

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Written By Saturday, 25 July 2026 Add Comment



July 25, 2026 at 02:04PM

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. An ordinary authenticated user triggers it by committing two crafted Jupyter notebooks and requesting their diff. The chain needs no administrator rights, continuous integration (CI) runner access, victim interaction

from The Hacker News https://ift.tt/e4YHETQ

0 Response to "Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads