GitLab flaw sees exploitation attempts days after patch
Image: Primary Threat actors began attempting to exploit a critical GitLab code-injection flaw roughly two days after its public disclosure, according to WatchTowr's honeypot network. GitLab patched CVE-2026-19478, rated 9.4, on August 17 in specified Community and Enterprise Edition releases. The company said the defect could, under certain conditions, let an unauthenticated remote user modify or delete public projects and user data through a GraphQL directive. WatchTowr advised self-managed users to update and inspect web logs for requests containing "@gl_introduced."
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
