GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab has released patches addressing a maximum-severity (CVSS 10.0) vulnerability affecting both its Community Edition (CE) and Enterprise Edition (EE). The flaw could allow an unauthenticated user to execute arbitrary code on the GitLab server. Exploitation is triggered via a specially crafted regular expression within a CI/CD configuration. The vulnerability represents a critical risk as it requires no authentication, making it broadly exploitable. GitLab has remediated the issue and urges users to apply the patches immediately. The flaw's maximum CVSS score underscores the severity of potential impact on affected installations. No specific CVE identifier was provided in the article excerpt.