> TritonInfoSec News
Home / Jul 26, 2026 / Story
0
#3 The Hacker News general July 25, 2026 at 08:34 UTC

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

By [email protected] (The Hacker News)

AI Summary

Security researcher Yuhang Wu published a working RCE proof-of-concept for GitLab 18.11.3 self-managed instances that allows any authenticated user — with no admin or CI runner privileges — to execute commands as the git system user. The exploit is triggered by committing two specially crafted Jupyter notebooks and requesting their diff, requiring no victim interaction beyond standard authentication. Organizations running unpatched self-managed GitLab instances should treat this as critical given the low privilege bar and publicly available exploit code.

Read full article → https://thehackernews.com/2026/07/researcher-publi…

Relevance score: 85.0/100

# More from July 26

  1. 1
    Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available The Hacker News
  2. 2
    Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE The Hacker News
  3. 4
    BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery The Hacker News
  4. 5
    Default Azure Automation Setting Enables Cross-Tenant Identity Takeover Dark Reading
  5. 6
    Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable The Hacker News
  6. 7
    Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts BleepingComputer
  7. 8
    Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks The Hacker News
  8. 9
    Golden Chickens Resurfaces With Four New Malware Families and Modular Implants The Hacker News
  9. 10
    Hermes AI agent used to automate attack on Thai Finance Ministry BleepingComputer