{ads}

›

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

Written By Wednesday, 23 September 2026 Add Comment



September 23, 2026 at 10:23PM

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a button labeled "Email work item to this project." Mail sent to it opens an issue in that project, authored

from The Hacker News https://ift.tt/Yx8uHfO

0 Response to "A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads