GitLab has patched a critical security flaw with a CVSS score of 10.0, the highest possible severity.
The vulnerability, CVE-2026-110264, could allow an unauthenticated attacker to execute arbitrary code on self-managed GitLab servers.
It affects GitLab versions dating back to 7.0, released in 2014.
GitLab says there is currently no evidence that the flaw has been exploited, but recommends updating to a patched version as soon as possible.