Auf den Punkt: A critical GitLab vulnerability allowed unauthenticated attackers to delete or manipulate software projects, which is why administrators should promptly apply the available patches.
A critical security vulnerability in GitLab allowed unauthenticated attackers to manipulate or delete software projects. Administrators should apply the available patches immediately.
According to Golem.de, a critical vulnerability has become known in GitLab that allows attackers to access projects without prior authentication and modify or completely delete them. The report does not name a CVE ID or specific affected version numbers. The vulnerability affects the platform’s access control, meaning the usual authentication mechanisms can be bypassed.
For security officers in enterprises, the severity of the vulnerability is particularly relevant because GitLab serves as a central instance for source code management and CI/CD pipelines in many organizations. A successful attack can not only lead to the loss of code and history, but can also impair the software supply chain and ongoing development processes. Since no authentication is required, the barrier to entry for attackers is significantly lowered, which increases the risk of broad, automated exploitation.
According to Golem.de, GitLab administrators should quickly check whether their instances are affected and promptly apply the provided security updates. Until the patches are installed, it is recommended to review access logs for unusual, unauthenticated access to project resources and, if necessary, temporarily restrict public access to the GitLab instance.
Source: www.golem.de · Published August 18, 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.