Critical path traversal GitLab bug hit in the wild

· Thestack · Sept. 14, 2026, 2:20 p.m.
Summary
A significant security vulnerability has been identified in self-hosted versions of GitLab, affecting around 40,000 installations. The Cybersecurity and Infrastructure Security Agency (CISA) has flagged potential exploitation of this bug.