Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

GitLab patches major security flaw - here's what we know

Isometric demonstrating multi-factor authentication using a mobile device.
  • GitLab patched CVE-2026-0723, a flaw allowing 2FA bypass and account takeover
  • Additional DoS vulnerabilities in authentication, API endpoints, Wiki, and SSH were also fixed
  • GitLab urges immediate upgrades; ~6,000 exposed CE instances remain potential targets

GitLab fixed a high-severity vulnerability in its Community Edition and Enterprise Edition (CE/EE) versions allowed threat actors to bypass two-factor authentication and potentially take over people’s accounts.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.